Jul 2 07:46:46.076866 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 1 23:45:21 -00 2024 Jul 2 07:46:46.076902 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:46:46.077372 kernel: BIOS-provided physical RAM map: Jul 2 07:46:46.077386 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 2 07:46:46.077397 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 2 07:46:46.077408 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 2 07:46:46.077425 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Jul 2 07:46:46.077437 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Jul 2 07:46:46.077449 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Jul 2 07:46:46.077462 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 2 07:46:46.077475 kernel: NX (Execute Disable) protection: active Jul 2 07:46:46.077487 kernel: SMBIOS 2.7 present. Jul 2 07:46:46.077498 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Jul 2 07:46:46.078855 kernel: Hypervisor detected: KVM Jul 2 07:46:46.078878 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 2 07:46:46.078891 kernel: kvm-clock: cpu 0, msr 72192001, primary cpu clock Jul 2 07:46:46.078903 kernel: kvm-clock: using sched offset of 6842619307 cycles Jul 2 07:46:46.078924 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 2 07:46:46.078937 kernel: tsc: Detected 2499.996 MHz processor Jul 2 07:46:46.078950 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 2 07:46:46.078967 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 2 07:46:46.078981 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Jul 2 07:46:46.078994 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 2 07:46:46.079007 kernel: Using GB pages for direct mapping Jul 2 07:46:46.079019 kernel: ACPI: Early table checksum verification disabled Jul 2 07:46:46.079033 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Jul 2 07:46:46.079045 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Jul 2 07:46:46.079059 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Jul 2 07:46:46.079072 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Jul 2 07:46:46.079088 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Jul 2 07:46:46.079100 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Jul 2 07:46:46.079113 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Jul 2 07:46:46.079124 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Jul 2 07:46:46.079136 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Jul 2 07:46:46.079149 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Jul 2 07:46:46.079162 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Jul 2 07:46:46.079176 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Jul 2 07:46:46.079194 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Jul 2 07:46:46.079208 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Jul 2 07:46:46.079223 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Jul 2 07:46:46.079241 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Jul 2 07:46:46.079255 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Jul 2 07:46:46.079269 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Jul 2 07:46:46.079710 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Jul 2 07:46:46.079742 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Jul 2 07:46:46.079757 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Jul 2 07:46:46.079771 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Jul 2 07:46:46.079786 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 2 07:46:46.079800 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Jul 2 07:46:46.079814 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Jul 2 07:46:46.079828 kernel: NUMA: Initialized distance table, cnt=1 Jul 2 07:46:46.079841 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Jul 2 07:46:46.079858 kernel: Zone ranges: Jul 2 07:46:46.079871 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 2 07:46:46.081099 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Jul 2 07:46:46.081120 kernel: Normal empty Jul 2 07:46:46.081135 kernel: Movable zone start for each node Jul 2 07:46:46.081150 kernel: Early memory node ranges Jul 2 07:46:46.081164 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 2 07:46:46.081178 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Jul 2 07:46:46.081192 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Jul 2 07:46:46.081211 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 07:46:46.081364 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 2 07:46:46.081380 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Jul 2 07:46:46.081395 kernel: ACPI: PM-Timer IO Port: 0xb008 Jul 2 07:46:46.081408 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 2 07:46:46.081422 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Jul 2 07:46:46.082360 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 2 07:46:46.082375 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 2 07:46:46.082388 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 2 07:46:46.082405 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 2 07:46:46.082553 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 2 07:46:46.082572 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 2 07:46:46.082604 kernel: TSC deadline timer available Jul 2 07:46:46.082617 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Jul 2 07:46:46.082630 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Jul 2 07:46:46.082643 kernel: Booting paravirtualized kernel on KVM Jul 2 07:46:46.082664 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 2 07:46:46.082678 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Jul 2 07:46:46.082697 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Jul 2 07:46:46.082711 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Jul 2 07:46:46.082725 kernel: pcpu-alloc: [0] 0 1 Jul 2 07:46:46.082739 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Jul 2 07:46:46.082753 kernel: kvm-guest: PV spinlocks enabled Jul 2 07:46:46.082767 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 2 07:46:46.082781 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Jul 2 07:46:46.082796 kernel: Policy zone: DMA32 Jul 2 07:46:46.082813 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:46:46.082831 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 07:46:46.082844 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 07:46:46.082856 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 2 07:46:46.082870 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 07:46:46.082884 kernel: Memory: 1934420K/2057760K available (12294K kernel code, 2276K rwdata, 13712K rodata, 47444K init, 4144K bss, 123080K reserved, 0K cma-reserved) Jul 2 07:46:46.082899 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 2 07:46:46.082913 kernel: Kernel/User page tables isolation: enabled Jul 2 07:46:46.082935 kernel: ftrace: allocating 34514 entries in 135 pages Jul 2 07:46:46.082952 kernel: ftrace: allocated 135 pages with 4 groups Jul 2 07:46:46.082966 kernel: rcu: Hierarchical RCU implementation. Jul 2 07:46:46.082982 kernel: rcu: RCU event tracing is enabled. Jul 2 07:46:46.082996 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 2 07:46:46.083010 kernel: Rude variant of Tasks RCU enabled. Jul 2 07:46:46.083188 kernel: Tracing variant of Tasks RCU enabled. Jul 2 07:46:46.083205 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 07:46:46.083219 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 2 07:46:46.083234 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Jul 2 07:46:46.083251 kernel: random: crng init done Jul 2 07:46:46.083265 kernel: Console: colour VGA+ 80x25 Jul 2 07:46:46.083280 kernel: printk: console [ttyS0] enabled Jul 2 07:46:46.083293 kernel: ACPI: Core revision 20210730 Jul 2 07:46:46.083308 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Jul 2 07:46:46.083322 kernel: APIC: Switch to symmetric I/O mode setup Jul 2 07:46:46.083336 kernel: x2apic enabled Jul 2 07:46:46.083350 kernel: Switched APIC routing to physical x2apic. Jul 2 07:46:46.083365 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Jul 2 07:46:46.083382 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499996) Jul 2 07:46:46.083396 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 2 07:46:46.083410 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Jul 2 07:46:46.083425 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 2 07:46:46.083449 kernel: Spectre V2 : Mitigation: Retpolines Jul 2 07:46:46.084745 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Jul 2 07:46:46.084761 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Jul 2 07:46:46.084778 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Jul 2 07:46:46.084793 kernel: RETBleed: Vulnerable Jul 2 07:46:46.084807 kernel: Speculative Store Bypass: Vulnerable Jul 2 07:46:46.084907 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Jul 2 07:46:46.084924 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 2 07:46:46.084938 kernel: GDS: Unknown: Dependent on hypervisor status Jul 2 07:46:46.084953 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 2 07:46:46.084972 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 2 07:46:46.084985 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 2 07:46:46.084999 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Jul 2 07:46:46.085012 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Jul 2 07:46:46.085026 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Jul 2 07:46:46.085043 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Jul 2 07:46:46.085057 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Jul 2 07:46:46.085072 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Jul 2 07:46:46.085087 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 2 07:46:46.085102 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Jul 2 07:46:46.085117 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Jul 2 07:46:46.085132 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Jul 2 07:46:46.085730 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Jul 2 07:46:46.085748 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Jul 2 07:46:46.085761 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Jul 2 07:46:46.085773 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Jul 2 07:46:46.085786 kernel: Freeing SMP alternatives memory: 32K Jul 2 07:46:46.085803 kernel: pid_max: default: 32768 minimum: 301 Jul 2 07:46:46.085817 kernel: LSM: Security Framework initializing Jul 2 07:46:46.085831 kernel: SELinux: Initializing. Jul 2 07:46:46.085845 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 07:46:46.085859 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 07:46:46.085873 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Jul 2 07:46:46.085887 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Jul 2 07:46:46.085901 kernel: signal: max sigframe size: 3632 Jul 2 07:46:46.085916 kernel: rcu: Hierarchical SRCU implementation. Jul 2 07:46:46.085930 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 2 07:46:46.085948 kernel: smp: Bringing up secondary CPUs ... Jul 2 07:46:46.085962 kernel: x86: Booting SMP configuration: Jul 2 07:46:46.085977 kernel: .... node #0, CPUs: #1 Jul 2 07:46:46.085991 kernel: kvm-clock: cpu 1, msr 72192041, secondary cpu clock Jul 2 07:46:46.086281 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Jul 2 07:46:46.086355 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Jul 2 07:46:46.086372 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Jul 2 07:46:46.086387 kernel: smp: Brought up 1 node, 2 CPUs Jul 2 07:46:46.086399 kernel: smpboot: Max logical packages: 1 Jul 2 07:46:46.086417 kernel: smpboot: Total of 2 processors activated (9999.98 BogoMIPS) Jul 2 07:46:46.086432 kernel: devtmpfs: initialized Jul 2 07:46:46.086446 kernel: x86/mm: Memory block size: 128MB Jul 2 07:46:46.086461 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 07:46:46.086475 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 2 07:46:46.086490 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 07:46:46.086504 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 07:46:46.086520 kernel: audit: initializing netlink subsys (disabled) Jul 2 07:46:46.086534 kernel: audit: type=2000 audit(1719906405.374:1): state=initialized audit_enabled=0 res=1 Jul 2 07:46:46.086552 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 07:46:46.086567 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 2 07:46:46.086594 kernel: cpuidle: using governor menu Jul 2 07:46:46.086609 kernel: ACPI: bus type PCI registered Jul 2 07:46:46.086624 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 07:46:46.086639 kernel: dca service started, version 1.12.1 Jul 2 07:46:46.086654 kernel: PCI: Using configuration type 1 for base access Jul 2 07:46:46.086669 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 2 07:46:46.086683 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 2 07:46:46.086701 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 07:46:46.086715 kernel: ACPI: Added _OSI(Module Device) Jul 2 07:46:46.086730 kernel: ACPI: Added _OSI(Processor Device) Jul 2 07:46:46.086742 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 07:46:46.086755 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 07:46:46.086769 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 07:46:46.086784 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 07:46:46.086799 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 07:46:46.086814 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Jul 2 07:46:46.086831 kernel: ACPI: Interpreter enabled Jul 2 07:46:46.086846 kernel: ACPI: PM: (supports S0 S5) Jul 2 07:46:46.086860 kernel: ACPI: Using IOAPIC for interrupt routing Jul 2 07:46:46.086875 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 2 07:46:46.086890 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Jul 2 07:46:46.086905 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 2 07:46:46.087128 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Jul 2 07:46:46.087263 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Jul 2 07:46:46.087285 kernel: acpiphp: Slot [3] registered Jul 2 07:46:46.087300 kernel: acpiphp: Slot [4] registered Jul 2 07:46:46.087315 kernel: acpiphp: Slot [5] registered Jul 2 07:46:46.087329 kernel: acpiphp: Slot [6] registered Jul 2 07:46:46.087343 kernel: acpiphp: Slot [7] registered Jul 2 07:46:46.087357 kernel: acpiphp: Slot [8] registered Jul 2 07:46:46.087371 kernel: acpiphp: Slot [9] registered Jul 2 07:46:46.087386 kernel: acpiphp: Slot [10] registered Jul 2 07:46:46.087401 kernel: acpiphp: Slot [11] registered Jul 2 07:46:46.087418 kernel: acpiphp: Slot [12] registered Jul 2 07:46:46.087433 kernel: acpiphp: Slot [13] registered Jul 2 07:46:46.087447 kernel: acpiphp: Slot [14] registered Jul 2 07:46:46.087462 kernel: acpiphp: Slot [15] registered Jul 2 07:46:46.087476 kernel: acpiphp: Slot [16] registered Jul 2 07:46:46.087491 kernel: acpiphp: Slot [17] registered Jul 2 07:46:46.087506 kernel: acpiphp: Slot [18] registered Jul 2 07:46:46.087521 kernel: acpiphp: Slot [19] registered Jul 2 07:46:46.087536 kernel: acpiphp: Slot [20] registered Jul 2 07:46:46.087553 kernel: acpiphp: Slot [21] registered Jul 2 07:46:46.087568 kernel: acpiphp: Slot [22] registered Jul 2 07:46:46.087732 kernel: acpiphp: Slot [23] registered Jul 2 07:46:46.087747 kernel: acpiphp: Slot [24] registered Jul 2 07:46:46.087760 kernel: acpiphp: Slot [25] registered Jul 2 07:46:46.087773 kernel: acpiphp: Slot [26] registered Jul 2 07:46:46.087787 kernel: acpiphp: Slot [27] registered Jul 2 07:46:46.087800 kernel: acpiphp: Slot [28] registered Jul 2 07:46:46.087812 kernel: acpiphp: Slot [29] registered Jul 2 07:46:46.087825 kernel: acpiphp: Slot [30] registered Jul 2 07:46:46.087841 kernel: acpiphp: Slot [31] registered Jul 2 07:46:46.087853 kernel: PCI host bridge to bus 0000:00 Jul 2 07:46:46.088045 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 2 07:46:46.088161 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 2 07:46:46.088306 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 2 07:46:46.088417 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Jul 2 07:46:46.088524 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 2 07:46:46.088684 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Jul 2 07:46:46.088817 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Jul 2 07:46:46.088950 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Jul 2 07:46:46.089075 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Jul 2 07:46:46.089609 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Jul 2 07:46:46.089847 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Jul 2 07:46:46.090095 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Jul 2 07:46:46.090363 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Jul 2 07:46:46.090497 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Jul 2 07:46:46.090842 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Jul 2 07:46:46.090986 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Jul 2 07:46:46.091125 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Jul 2 07:46:46.091425 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Jul 2 07:46:46.091625 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Jul 2 07:46:46.091875 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 2 07:46:46.092022 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Jul 2 07:46:46.092150 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Jul 2 07:46:46.092293 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Jul 2 07:46:46.092420 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Jul 2 07:46:46.092441 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 2 07:46:46.092462 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 2 07:46:46.092477 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 2 07:46:46.092492 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 2 07:46:46.092508 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jul 2 07:46:46.092523 kernel: iommu: Default domain type: Translated Jul 2 07:46:46.092539 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 2 07:46:46.092717 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Jul 2 07:46:46.092843 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 2 07:46:46.093060 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Jul 2 07:46:46.093088 kernel: vgaarb: loaded Jul 2 07:46:46.093104 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 07:46:46.093120 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 07:46:46.093135 kernel: PTP clock support registered Jul 2 07:46:46.093150 kernel: PCI: Using ACPI for IRQ routing Jul 2 07:46:46.093165 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 2 07:46:46.093180 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 2 07:46:46.093195 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Jul 2 07:46:46.093212 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Jul 2 07:46:46.093228 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Jul 2 07:46:46.093243 kernel: clocksource: Switched to clocksource kvm-clock Jul 2 07:46:46.093258 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 07:46:46.093273 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 07:46:46.093288 kernel: pnp: PnP ACPI init Jul 2 07:46:46.093304 kernel: pnp: PnP ACPI: found 5 devices Jul 2 07:46:46.093319 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 2 07:46:46.093334 kernel: NET: Registered PF_INET protocol family Jul 2 07:46:46.093353 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 07:46:46.093368 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 2 07:46:46.093383 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 07:46:46.093398 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 2 07:46:46.093413 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 2 07:46:46.093428 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 2 07:46:46.093443 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 07:46:46.093458 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 07:46:46.093474 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 07:46:46.093492 kernel: NET: Registered PF_XDP protocol family Jul 2 07:46:46.093627 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 2 07:46:46.093743 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 2 07:46:46.093855 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 2 07:46:46.093967 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Jul 2 07:46:46.094153 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 2 07:46:46.094358 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Jul 2 07:46:46.094386 kernel: PCI: CLS 0 bytes, default 64 Jul 2 07:46:46.094402 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 2 07:46:46.094418 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Jul 2 07:46:46.094433 kernel: clocksource: Switched to clocksource tsc Jul 2 07:46:46.094449 kernel: Initialise system trusted keyrings Jul 2 07:46:46.094464 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 2 07:46:46.094478 kernel: Key type asymmetric registered Jul 2 07:46:46.094492 kernel: Asymmetric key parser 'x509' registered Jul 2 07:46:46.094508 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 07:46:46.094525 kernel: io scheduler mq-deadline registered Jul 2 07:46:46.094542 kernel: io scheduler kyber registered Jul 2 07:46:46.094557 kernel: io scheduler bfq registered Jul 2 07:46:46.094573 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 2 07:46:46.094601 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 07:46:46.094617 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 2 07:46:46.094632 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 2 07:46:46.094647 kernel: i8042: Warning: Keylock active Jul 2 07:46:46.094662 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 2 07:46:46.094681 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 2 07:46:46.094817 kernel: rtc_cmos 00:00: RTC can wake from S4 Jul 2 07:46:46.094946 kernel: rtc_cmos 00:00: registered as rtc0 Jul 2 07:46:46.095173 kernel: rtc_cmos 00:00: setting system clock to 2024-07-02T07:46:45 UTC (1719906405) Jul 2 07:46:46.095301 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Jul 2 07:46:46.095320 kernel: intel_pstate: CPU model not supported Jul 2 07:46:46.095336 kernel: NET: Registered PF_INET6 protocol family Jul 2 07:46:46.095351 kernel: Segment Routing with IPv6 Jul 2 07:46:46.095371 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 07:46:46.095386 kernel: NET: Registered PF_PACKET protocol family Jul 2 07:46:46.095401 kernel: Key type dns_resolver registered Jul 2 07:46:46.095416 kernel: IPI shorthand broadcast: enabled Jul 2 07:46:46.095431 kernel: sched_clock: Marking stable (409247112, 227988916)->(762190517, -124954489) Jul 2 07:46:46.095447 kernel: registered taskstats version 1 Jul 2 07:46:46.095462 kernel: Loading compiled-in X.509 certificates Jul 2 07:46:46.095477 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: a1ce693884775675566f1ed116e36d15950b9a42' Jul 2 07:46:46.095492 kernel: Key type .fscrypt registered Jul 2 07:46:46.095510 kernel: Key type fscrypt-provisioning registered Jul 2 07:46:46.095526 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 07:46:46.095541 kernel: ima: Allocated hash algorithm: sha1 Jul 2 07:46:46.095555 kernel: ima: No architecture policies found Jul 2 07:46:46.095570 kernel: clk: Disabling unused clocks Jul 2 07:46:46.098673 kernel: Freeing unused kernel image (initmem) memory: 47444K Jul 2 07:46:46.098692 kernel: Write protecting the kernel read-only data: 28672k Jul 2 07:46:46.098707 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 2 07:46:46.098723 kernel: Freeing unused kernel image (rodata/data gap) memory: 624K Jul 2 07:46:46.098743 kernel: Run /init as init process Jul 2 07:46:46.098758 kernel: with arguments: Jul 2 07:46:46.098774 kernel: /init Jul 2 07:46:46.098788 kernel: with environment: Jul 2 07:46:46.098803 kernel: HOME=/ Jul 2 07:46:46.098818 kernel: TERM=linux Jul 2 07:46:46.098832 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 07:46:46.098853 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:46:46.098874 systemd[1]: Detected virtualization amazon. Jul 2 07:46:46.098891 systemd[1]: Detected architecture x86-64. Jul 2 07:46:46.098906 systemd[1]: Running in initrd. Jul 2 07:46:46.098929 systemd[1]: No hostname configured, using default hostname. Jul 2 07:46:46.098959 systemd[1]: Hostname set to . Jul 2 07:46:46.098981 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:46:46.098998 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 2 07:46:46.099015 systemd[1]: Queued start job for default target initrd.target. Jul 2 07:46:46.099031 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:46:46.099047 systemd[1]: Reached target cryptsetup.target. Jul 2 07:46:46.099064 systemd[1]: Reached target paths.target. Jul 2 07:46:46.099080 systemd[1]: Reached target slices.target. Jul 2 07:46:46.099096 systemd[1]: Reached target swap.target. Jul 2 07:46:46.099111 systemd[1]: Reached target timers.target. Jul 2 07:46:46.099131 systemd[1]: Listening on iscsid.socket. Jul 2 07:46:46.099147 systemd[1]: Listening on iscsiuio.socket. Jul 2 07:46:46.099165 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 07:46:46.099181 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 07:46:46.099198 systemd[1]: Listening on systemd-journald.socket. Jul 2 07:46:46.099218 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:46:46.099234 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:46:46.099251 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:46:46.099270 systemd[1]: Reached target sockets.target. Jul 2 07:46:46.099287 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:46:46.099304 systemd[1]: Finished network-cleanup.service. Jul 2 07:46:46.099320 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 07:46:46.099337 systemd[1]: Starting systemd-journald.service... Jul 2 07:46:46.099354 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:46:46.099371 systemd[1]: Starting systemd-resolved.service... Jul 2 07:46:46.099387 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 07:46:46.099410 systemd-journald[185]: Journal started Jul 2 07:46:46.099489 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2fccd8cb10cb5f212121414124d1a4) is 4.8M, max 38.7M, 33.9M free. Jul 2 07:46:46.110712 systemd[1]: Started systemd-journald.service. Jul 2 07:46:46.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.117598 kernel: audit: type=1130 audit(1719906406.111:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.117768 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:46:46.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.124396 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 07:46:46.125401 kernel: audit: type=1130 audit(1719906406.118:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.131637 kernel: audit: type=1130 audit(1719906406.124:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.132383 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 07:46:46.148840 systemd-modules-load[186]: Inserted module 'overlay' Jul 2 07:46:46.282897 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 07:46:46.282954 kernel: Bridge firewalling registered Jul 2 07:46:46.282977 kernel: SCSI subsystem initialized Jul 2 07:46:46.282996 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 07:46:46.283013 kernel: device-mapper: uevent: version 1.0.3 Jul 2 07:46:46.283030 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 07:46:46.155338 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 07:46:46.190999 systemd-resolved[187]: Positive Trust Anchors: Jul 2 07:46:46.191012 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:46:46.291025 kernel: audit: type=1130 audit(1719906406.284:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.191060 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:46:46.205457 systemd-resolved[187]: Defaulting to hostname 'linux'. Jul 2 07:46:46.222894 systemd-modules-load[186]: Inserted module 'br_netfilter' Jul 2 07:46:46.302128 kernel: audit: type=1130 audit(1719906406.296:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.273687 systemd-modules-load[186]: Inserted module 'dm_multipath' Jul 2 07:46:46.296652 systemd[1]: Started systemd-resolved.service. Jul 2 07:46:46.309603 kernel: audit: type=1130 audit(1719906406.302:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.303326 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:46:46.314269 kernel: audit: type=1130 audit(1719906406.308:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.304479 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 07:46:46.309824 systemd[1]: Reached target nss-lookup.target. Jul 2 07:46:46.315480 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 07:46:46.317998 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:46:46.330799 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:46:46.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.334602 kernel: audit: type=1130 audit(1719906406.329:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.341044 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 07:46:46.340000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.342872 systemd[1]: Starting dracut-cmdline.service... Jul 2 07:46:46.347359 kernel: audit: type=1130 audit(1719906406.340:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.355213 dracut-cmdline[208]: dracut-dracut-053 Jul 2 07:46:46.358766 dracut-cmdline[208]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:46:46.435606 kernel: Loading iSCSI transport class v2.0-870. Jul 2 07:46:46.484615 kernel: iscsi: registered transport (tcp) Jul 2 07:46:46.512614 kernel: iscsi: registered transport (qla4xxx) Jul 2 07:46:46.512687 kernel: QLogic iSCSI HBA Driver Jul 2 07:46:46.550903 systemd[1]: Finished dracut-cmdline.service. Jul 2 07:46:46.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:46.553692 systemd[1]: Starting dracut-pre-udev.service... Jul 2 07:46:46.608612 kernel: raid6: avx512x4 gen() 16794 MB/s Jul 2 07:46:46.625610 kernel: raid6: avx512x4 xor() 7030 MB/s Jul 2 07:46:46.642612 kernel: raid6: avx512x2 gen() 16196 MB/s Jul 2 07:46:46.659615 kernel: raid6: avx512x2 xor() 21104 MB/s Jul 2 07:46:46.676608 kernel: raid6: avx512x1 gen() 16779 MB/s Jul 2 07:46:46.693613 kernel: raid6: avx512x1 xor() 19159 MB/s Jul 2 07:46:46.710614 kernel: raid6: avx2x4 gen() 16548 MB/s Jul 2 07:46:46.727627 kernel: raid6: avx2x4 xor() 6594 MB/s Jul 2 07:46:46.744611 kernel: raid6: avx2x2 gen() 16891 MB/s Jul 2 07:46:46.761609 kernel: raid6: avx2x2 xor() 16307 MB/s Jul 2 07:46:46.778615 kernel: raid6: avx2x1 gen() 13212 MB/s Jul 2 07:46:46.795618 kernel: raid6: avx2x1 xor() 14616 MB/s Jul 2 07:46:46.812613 kernel: raid6: sse2x4 gen() 8939 MB/s Jul 2 07:46:46.829609 kernel: raid6: sse2x4 xor() 5633 MB/s Jul 2 07:46:46.846613 kernel: raid6: sse2x2 gen() 9631 MB/s Jul 2 07:46:46.863625 kernel: raid6: sse2x2 xor() 5772 MB/s Jul 2 07:46:46.880611 kernel: raid6: sse2x1 gen() 8960 MB/s Jul 2 07:46:46.898367 kernel: raid6: sse2x1 xor() 4174 MB/s Jul 2 07:46:46.898454 kernel: raid6: using algorithm avx2x2 gen() 16891 MB/s Jul 2 07:46:46.898472 kernel: raid6: .... xor() 16307 MB/s, rmw enabled Jul 2 07:46:46.899223 kernel: raid6: using avx512x2 recovery algorithm Jul 2 07:46:46.914613 kernel: xor: automatically using best checksumming function avx Jul 2 07:46:47.027613 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 2 07:46:47.038427 systemd[1]: Finished dracut-pre-udev.service. Jul 2 07:46:47.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:47.038000 audit: BPF prog-id=7 op=LOAD Jul 2 07:46:47.038000 audit: BPF prog-id=8 op=LOAD Jul 2 07:46:47.041120 systemd[1]: Starting systemd-udevd.service... Jul 2 07:46:47.057470 systemd-udevd[385]: Using default interface naming scheme 'v252'. Jul 2 07:46:47.064081 systemd[1]: Started systemd-udevd.service. Jul 2 07:46:47.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:47.066726 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 07:46:47.090968 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Jul 2 07:46:47.135719 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 07:46:47.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:47.139286 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:46:47.193983 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:46:47.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:47.267608 kernel: cryptd: max_cpu_qlen set to 1000 Jul 2 07:46:47.318705 kernel: ena 0000:00:05.0: ENA device version: 0.10 Jul 2 07:46:47.319015 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Jul 2 07:46:47.328213 kernel: nvme nvme0: pci function 0000:00:04.0 Jul 2 07:46:47.328562 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Jul 2 07:46:47.329764 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Jul 2 07:46:47.340064 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:4c:c8:b5:43:2b Jul 2 07:46:47.342687 kernel: nvme nvme0: 2/0/0 default/read/poll queues Jul 2 07:46:47.343610 kernel: AVX2 version of gcm_enc/dec engaged. Jul 2 07:46:47.343650 kernel: AES CTR mode by8 optimization enabled Jul 2 07:46:47.345622 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 07:46:47.345663 kernel: GPT:9289727 != 16777215 Jul 2 07:46:47.345940 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 07:46:47.345960 kernel: GPT:9289727 != 16777215 Jul 2 07:46:47.345977 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 07:46:47.345993 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:46:47.348992 (udev-worker)[444]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:46:47.524425 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (432) Jul 2 07:46:47.473860 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 07:46:47.558238 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:46:47.571821 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 07:46:47.587667 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 07:46:47.587823 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 07:46:47.591928 systemd[1]: Starting disk-uuid.service... Jul 2 07:46:47.604322 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:46:47.604495 disk-uuid[593]: Primary Header is updated. Jul 2 07:46:47.604495 disk-uuid[593]: Secondary Entries is updated. Jul 2 07:46:47.604495 disk-uuid[593]: Secondary Header is updated. Jul 2 07:46:47.616271 kernel: GPT:disk_guids don't match. Jul 2 07:46:47.616322 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 07:46:47.616348 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:46:47.622615 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:46:48.622653 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:46:48.623227 disk-uuid[594]: The operation has completed successfully. Jul 2 07:46:48.753416 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 07:46:48.753548 systemd[1]: Finished disk-uuid.service. Jul 2 07:46:48.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:48.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:48.771187 systemd[1]: Starting verity-setup.service... Jul 2 07:46:48.800720 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 2 07:46:48.925212 systemd[1]: Found device dev-mapper-usr.device. Jul 2 07:46:48.927363 systemd[1]: Mounting sysusr-usr.mount... Jul 2 07:46:48.933846 systemd[1]: Finished verity-setup.service. Jul 2 07:46:48.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.028184 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 07:46:49.028664 systemd[1]: Mounted sysusr-usr.mount. Jul 2 07:46:49.029627 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 07:46:49.031749 systemd[1]: Starting ignition-setup.service... Jul 2 07:46:49.034755 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 07:46:49.053774 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:46:49.053843 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 07:46:49.053861 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 07:46:49.073615 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 07:46:49.088619 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 07:46:49.125719 systemd[1]: Finished ignition-setup.service. Jul 2 07:46:49.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.128474 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 07:46:49.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.129639 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 07:46:49.131000 audit: BPF prog-id=9 op=LOAD Jul 2 07:46:49.137671 systemd[1]: Starting systemd-networkd.service... Jul 2 07:46:49.229366 systemd-networkd[1105]: lo: Link UP Jul 2 07:46:49.229380 systemd-networkd[1105]: lo: Gained carrier Jul 2 07:46:49.231246 systemd-networkd[1105]: Enumeration completed Jul 2 07:46:49.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.231539 systemd-networkd[1105]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:46:49.231868 systemd[1]: Started systemd-networkd.service. Jul 2 07:46:49.233819 systemd[1]: Reached target network.target. Jul 2 07:46:49.236188 systemd[1]: Starting iscsiuio.service... Jul 2 07:46:49.243044 systemd-networkd[1105]: eth0: Link UP Jul 2 07:46:49.243058 systemd-networkd[1105]: eth0: Gained carrier Jul 2 07:46:49.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.244999 systemd[1]: Started iscsiuio.service. Jul 2 07:46:49.247545 systemd[1]: Starting iscsid.service... Jul 2 07:46:49.252602 iscsid[1111]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:46:49.252602 iscsid[1111]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 07:46:49.252602 iscsid[1111]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 07:46:49.252602 iscsid[1111]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 07:46:49.260711 iscsid[1111]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:46:49.260711 iscsid[1111]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 07:46:49.260651 systemd[1]: Started iscsid.service. Jul 2 07:46:49.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.263165 systemd-networkd[1105]: eth0: DHCPv4 address 172.31.20.37/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 2 07:46:49.266946 systemd[1]: Starting dracut-initqueue.service... Jul 2 07:46:49.282665 systemd[1]: Finished dracut-initqueue.service. Jul 2 07:46:49.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.283742 systemd[1]: Reached target remote-fs-pre.target. Jul 2 07:46:49.286282 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:46:49.287175 systemd[1]: Reached target remote-fs.target. Jul 2 07:46:49.289798 systemd[1]: Starting dracut-pre-mount.service... Jul 2 07:46:49.310748 systemd[1]: Finished dracut-pre-mount.service. Jul 2 07:46:49.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.953624 ignition[1104]: Ignition 2.14.0 Jul 2 07:46:49.953659 ignition[1104]: Stage: fetch-offline Jul 2 07:46:49.953830 ignition[1104]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:49.953875 ignition[1104]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:49.984704 ignition[1104]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:49.985032 ignition[1104]: Ignition finished successfully Jul 2 07:46:49.987846 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 07:46:49.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:49.990525 systemd[1]: Starting ignition-fetch.service... Jul 2 07:46:50.004479 ignition[1130]: Ignition 2.14.0 Jul 2 07:46:50.004494 ignition[1130]: Stage: fetch Jul 2 07:46:50.004687 ignition[1130]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:50.004710 ignition[1130]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:50.015072 ignition[1130]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:50.016735 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:50.059386 ignition[1130]: INFO : PUT result: OK Jul 2 07:46:50.063533 ignition[1130]: DEBUG : parsed url from cmdline: "" Jul 2 07:46:50.064692 ignition[1130]: INFO : no config URL provided Jul 2 07:46:50.064692 ignition[1130]: INFO : reading system config file "/usr/lib/ignition/user.ign" Jul 2 07:46:50.064692 ignition[1130]: INFO : no config at "/usr/lib/ignition/user.ign" Jul 2 07:46:50.064692 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:50.069511 ignition[1130]: INFO : PUT result: OK Jul 2 07:46:50.070417 ignition[1130]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Jul 2 07:46:50.076438 ignition[1130]: INFO : GET result: OK Jul 2 07:46:50.077329 ignition[1130]: DEBUG : parsing config with SHA512: 7cc805eb168c7cf92e29ccd1f46b8d15b06652f3c140ca7da8fbd06a1ad9fc37b90b2e306a2e1a09e57236cc76612f601757a9f39ae2b6f199d236c9a966b929 Jul 2 07:46:50.085892 unknown[1130]: fetched base config from "system" Jul 2 07:46:50.085909 unknown[1130]: fetched base config from "system" Jul 2 07:46:50.085924 unknown[1130]: fetched user config from "aws" Jul 2 07:46:50.089106 ignition[1130]: fetch: fetch complete Jul 2 07:46:50.089120 ignition[1130]: fetch: fetch passed Jul 2 07:46:50.089191 ignition[1130]: Ignition finished successfully Jul 2 07:46:50.092646 systemd[1]: Finished ignition-fetch.service. Jul 2 07:46:50.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.094015 systemd[1]: Starting ignition-kargs.service... Jul 2 07:46:50.105472 ignition[1136]: Ignition 2.14.0 Jul 2 07:46:50.105487 ignition[1136]: Stage: kargs Jul 2 07:46:50.105708 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:50.105744 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:50.115318 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:50.116830 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:50.118678 ignition[1136]: INFO : PUT result: OK Jul 2 07:46:50.122265 ignition[1136]: kargs: kargs passed Jul 2 07:46:50.122500 ignition[1136]: Ignition finished successfully Jul 2 07:46:50.124763 systemd[1]: Finished ignition-kargs.service. Jul 2 07:46:50.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.127251 systemd[1]: Starting ignition-disks.service... Jul 2 07:46:50.136467 ignition[1142]: Ignition 2.14.0 Jul 2 07:46:50.136480 ignition[1142]: Stage: disks Jul 2 07:46:50.136706 ignition[1142]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:50.136739 ignition[1142]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:50.145751 ignition[1142]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:50.147038 ignition[1142]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:50.148840 ignition[1142]: INFO : PUT result: OK Jul 2 07:46:50.151713 ignition[1142]: disks: disks passed Jul 2 07:46:50.151782 ignition[1142]: Ignition finished successfully Jul 2 07:46:50.154567 systemd[1]: Finished ignition-disks.service. Jul 2 07:46:50.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.156083 systemd[1]: Reached target initrd-root-device.target. Jul 2 07:46:50.159327 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:46:50.159462 systemd[1]: Reached target local-fs.target. Jul 2 07:46:50.162246 systemd[1]: Reached target sysinit.target. Jul 2 07:46:50.164631 systemd[1]: Reached target basic.target. Jul 2 07:46:50.167230 systemd[1]: Starting systemd-fsck-root.service... Jul 2 07:46:50.238204 systemd-fsck[1150]: ROOT: clean, 614/553520 files, 56020/553472 blocks Jul 2 07:46:50.244294 systemd[1]: Finished systemd-fsck-root.service. Jul 2 07:46:50.252692 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 2 07:46:50.252728 kernel: audit: type=1130 audit(1719906410.243:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.243000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.245967 systemd[1]: Mounting sysroot.mount... Jul 2 07:46:50.274539 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 07:46:50.275632 systemd[1]: Mounted sysroot.mount. Jul 2 07:46:50.279434 systemd[1]: Reached target initrd-root-fs.target. Jul 2 07:46:50.289607 systemd[1]: Mounting sysroot-usr.mount... Jul 2 07:46:50.293179 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 07:46:50.293271 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 07:46:50.293316 systemd[1]: Reached target ignition-diskful.target. Jul 2 07:46:50.306248 systemd[1]: Mounted sysroot-usr.mount. Jul 2 07:46:50.336758 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 07:46:50.339439 systemd[1]: Starting initrd-setup-root.service... Jul 2 07:46:50.351120 initrd-setup-root[1172]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 07:46:50.359606 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1167) Jul 2 07:46:50.362781 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:46:50.362845 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 07:46:50.362863 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 07:46:50.366419 initrd-setup-root[1190]: cut: /sysroot/etc/group: No such file or directory Jul 2 07:46:50.378471 initrd-setup-root[1204]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 07:46:50.381618 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 07:46:50.388885 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 07:46:50.402773 initrd-setup-root[1214]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 07:46:50.658749 systemd[1]: Finished initrd-setup-root.service. Jul 2 07:46:50.670513 kernel: audit: type=1130 audit(1719906410.657:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.660158 systemd[1]: Starting ignition-mount.service... Jul 2 07:46:50.674081 systemd[1]: Starting sysroot-boot.service... Jul 2 07:46:50.678643 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 2 07:46:50.678903 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 2 07:46:50.707996 ignition[1233]: INFO : Ignition 2.14.0 Jul 2 07:46:50.709102 ignition[1233]: INFO : Stage: mount Jul 2 07:46:50.709958 ignition[1233]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:50.711350 ignition[1233]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:50.723664 ignition[1233]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:50.724772 systemd[1]: Finished sysroot-boot.service. Jul 2 07:46:50.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.730631 kernel: audit: type=1130 audit(1719906410.724:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.730657 ignition[1233]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:50.730657 ignition[1233]: INFO : PUT result: OK Jul 2 07:46:50.736057 ignition[1233]: INFO : mount: mount passed Jul 2 07:46:50.737079 ignition[1233]: INFO : Ignition finished successfully Jul 2 07:46:50.740769 systemd[1]: Finished ignition-mount.service. Jul 2 07:46:50.746733 kernel: audit: type=1130 audit(1719906410.740:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:50.742687 systemd[1]: Starting ignition-files.service... Jul 2 07:46:50.761372 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 07:46:50.775617 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1242) Jul 2 07:46:50.778411 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:46:50.778524 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 07:46:50.778546 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 07:46:50.786624 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 07:46:50.789142 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 07:46:50.822529 ignition[1261]: INFO : Ignition 2.14.0 Jul 2 07:46:50.822529 ignition[1261]: INFO : Stage: files Jul 2 07:46:50.825405 ignition[1261]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:50.825405 ignition[1261]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:50.837957 ignition[1261]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:50.839659 ignition[1261]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:50.841516 ignition[1261]: INFO : PUT result: OK Jul 2 07:46:50.846718 ignition[1261]: DEBUG : files: compiled without relabeling support, skipping Jul 2 07:46:50.851765 ignition[1261]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 07:46:50.851765 ignition[1261]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 07:46:50.859140 ignition[1261]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 07:46:50.860968 ignition[1261]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 07:46:50.863234 unknown[1261]: wrote ssh authorized keys file for user: core Jul 2 07:46:50.864621 ignition[1261]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 07:46:50.866665 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:46:50.869397 ignition[1261]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 2 07:46:50.961830 ignition[1261]: INFO : GET result: OK Jul 2 07:46:51.078311 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:46:51.080333 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 2 07:46:51.080333 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:46:51.094753 ignition[1261]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2353223123" Jul 2 07:46:51.098100 ignition[1261]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2353223123": device or resource busy Jul 2 07:46:51.098100 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2353223123", trying btrfs: device or resource busy Jul 2 07:46:51.098100 ignition[1261]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2353223123" Jul 2 07:46:51.106086 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1266) Jul 2 07:46:51.106114 ignition[1261]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2353223123" Jul 2 07:46:51.115217 ignition[1261]: INFO : op(3): [started] unmounting "/mnt/oem2353223123" Jul 2 07:46:51.117496 ignition[1261]: INFO : op(3): [finished] unmounting "/mnt/oem2353223123" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:51.117496 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 2 07:46:51.117496 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:46:51.154806 ignition[1261]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem633606" Jul 2 07:46:51.154806 ignition[1261]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem633606": device or resource busy Jul 2 07:46:51.154806 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem633606", trying btrfs: device or resource busy Jul 2 07:46:51.154806 ignition[1261]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem633606" Jul 2 07:46:51.154806 ignition[1261]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem633606" Jul 2 07:46:51.154806 ignition[1261]: INFO : op(6): [started] unmounting "/mnt/oem633606" Jul 2 07:46:51.154806 ignition[1261]: INFO : op(6): [finished] unmounting "/mnt/oem633606" Jul 2 07:46:51.154806 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 2 07:46:51.154806 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 2 07:46:51.154806 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:46:51.134900 systemd-networkd[1105]: eth0: Gained IPv6LL Jul 2 07:46:51.178468 ignition[1261]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2636709257" Jul 2 07:46:51.178468 ignition[1261]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2636709257": device or resource busy Jul 2 07:46:51.178468 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2636709257", trying btrfs: device or resource busy Jul 2 07:46:51.178468 ignition[1261]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2636709257" Jul 2 07:46:51.178468 ignition[1261]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2636709257" Jul 2 07:46:51.178468 ignition[1261]: INFO : op(9): [started] unmounting "/mnt/oem2636709257" Jul 2 07:46:51.178468 ignition[1261]: INFO : op(9): [finished] unmounting "/mnt/oem2636709257" Jul 2 07:46:51.178468 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 2 07:46:51.178468 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 07:46:51.178468 ignition[1261]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:46:51.200255 ignition[1261]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1069650876" Jul 2 07:46:51.200255 ignition[1261]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1069650876": device or resource busy Jul 2 07:46:51.200255 ignition[1261]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1069650876", trying btrfs: device or resource busy Jul 2 07:46:51.200255 ignition[1261]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1069650876" Jul 2 07:46:51.200255 ignition[1261]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1069650876" Jul 2 07:46:51.200255 ignition[1261]: INFO : op(c): [started] unmounting "/mnt/oem1069650876" Jul 2 07:46:51.200255 ignition[1261]: INFO : op(c): [finished] unmounting "/mnt/oem1069650876" Jul 2 07:46:51.200255 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 07:46:51.200255 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:51.200255 ignition[1261]: INFO : GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.29.2-x86-64.raw: attempt #1 Jul 2 07:46:51.576359 ignition[1261]: INFO : GET result: OK Jul 2 07:46:51.968114 ignition[1261]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:51.968114 ignition[1261]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 2 07:46:51.968114 ignition[1261]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 2 07:46:51.968114 ignition[1261]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(12): [started] processing unit "nvidia.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(12): [finished] processing unit "nvidia.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(15): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(15): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(16): [started] setting preset to enabled for "amazon-ssm-agent.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(16): [finished] setting preset to enabled for "amazon-ssm-agent.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(17): [started] setting preset to enabled for "nvidia.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(17): [finished] setting preset to enabled for "nvidia.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(18): [started] setting preset to enabled for "prepare-helm.service" Jul 2 07:46:51.978391 ignition[1261]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 07:46:52.016081 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:46:52.016081 ignition[1261]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:46:52.016081 ignition[1261]: INFO : files: files passed Jul 2 07:46:52.016081 ignition[1261]: INFO : Ignition finished successfully Jul 2 07:46:52.025015 systemd[1]: Finished ignition-files.service. Jul 2 07:46:52.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.033620 kernel: audit: type=1130 audit(1719906412.025:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.036462 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 07:46:52.041246 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 07:46:52.042672 systemd[1]: Starting ignition-quench.service... Jul 2 07:46:52.050000 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 07:46:52.051099 systemd[1]: Finished ignition-quench.service. Jul 2 07:46:52.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.060623 kernel: audit: type=1130 audit(1719906412.051:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.060691 kernel: audit: type=1131 audit(1719906412.051:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.062740 initrd-setup-root-after-ignition[1286]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 07:46:52.065625 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 07:46:52.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.068145 systemd[1]: Reached target ignition-complete.target. Jul 2 07:46:52.071596 kernel: audit: type=1130 audit(1719906412.066:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.074339 systemd[1]: Starting initrd-parse-etc.service... Jul 2 07:46:52.103316 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 07:46:52.103446 systemd[1]: Finished initrd-parse-etc.service. Jul 2 07:46:52.107175 systemd[1]: Reached target initrd-fs.target. Jul 2 07:46:52.116817 kernel: audit: type=1130 audit(1719906412.105:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.116881 kernel: audit: type=1131 audit(1719906412.105:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.116771 systemd[1]: Reached target initrd.target. Jul 2 07:46:52.118547 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 07:46:52.121011 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 07:46:52.141352 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 07:46:52.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.145237 systemd[1]: Starting initrd-cleanup.service... Jul 2 07:46:52.160690 systemd[1]: Stopped target nss-lookup.target. Jul 2 07:46:52.162793 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 07:46:52.164846 systemd[1]: Stopped target timers.target. Jul 2 07:46:52.165061 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 07:46:52.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.165215 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 07:46:52.168159 systemd[1]: Stopped target initrd.target. Jul 2 07:46:52.169881 systemd[1]: Stopped target basic.target. Jul 2 07:46:52.171695 systemd[1]: Stopped target ignition-complete.target. Jul 2 07:46:52.172379 systemd[1]: Stopped target ignition-diskful.target. Jul 2 07:46:52.174502 systemd[1]: Stopped target initrd-root-device.target. Jul 2 07:46:52.176267 systemd[1]: Stopped target remote-fs.target. Jul 2 07:46:52.180250 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 07:46:52.185378 systemd[1]: Stopped target sysinit.target. Jul 2 07:46:52.187163 systemd[1]: Stopped target local-fs.target. Jul 2 07:46:52.189016 systemd[1]: Stopped target local-fs-pre.target. Jul 2 07:46:52.191164 systemd[1]: Stopped target swap.target. Jul 2 07:46:52.192937 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 07:46:52.194479 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 07:46:52.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.196967 systemd[1]: Stopped target cryptsetup.target. Jul 2 07:46:52.197133 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 07:46:52.197247 systemd[1]: Stopped dracut-initqueue.service. Jul 2 07:46:52.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.203900 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 07:46:52.205861 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 07:46:52.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.208770 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 07:46:52.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.208908 systemd[1]: Stopped ignition-files.service. Jul 2 07:46:52.211464 systemd[1]: Stopping ignition-mount.service... Jul 2 07:46:52.225677 ignition[1299]: INFO : Ignition 2.14.0 Jul 2 07:46:52.225677 ignition[1299]: INFO : Stage: umount Jul 2 07:46:52.225677 ignition[1299]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:46:52.225677 ignition[1299]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:46:52.228889 systemd[1]: Stopping iscsiuio.service... Jul 2 07:46:52.237935 systemd[1]: Stopping sysroot-boot.service... Jul 2 07:46:52.240322 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 07:46:52.242570 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 07:46:52.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.246564 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 07:46:52.248230 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 07:46:52.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.254726 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 07:46:52.256101 systemd[1]: Stopped iscsiuio.service. Jul 2 07:46:52.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.266617 ignition[1299]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:46:52.267939 ignition[1299]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:46:52.269361 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 07:46:52.270507 ignition[1299]: INFO : PUT result: OK Jul 2 07:46:52.275194 ignition[1299]: INFO : umount: umount passed Jul 2 07:46:52.275194 ignition[1299]: INFO : Ignition finished successfully Jul 2 07:46:52.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.275005 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 07:46:52.275103 systemd[1]: Finished initrd-cleanup.service. Jul 2 07:46:52.279599 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 07:46:52.280562 systemd[1]: Stopped ignition-mount.service. Jul 2 07:46:52.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.283246 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 07:46:52.283306 systemd[1]: Stopped ignition-disks.service. Jul 2 07:46:52.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.286333 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 07:46:52.286392 systemd[1]: Stopped ignition-kargs.service. Jul 2 07:46:52.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.289983 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 2 07:46:52.290050 systemd[1]: Stopped ignition-fetch.service. Jul 2 07:46:52.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.292903 systemd[1]: Stopped target network.target. Jul 2 07:46:52.293791 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 07:46:52.294697 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 07:46:52.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.302113 systemd[1]: Stopped target paths.target. Jul 2 07:46:52.305376 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 07:46:52.310688 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 07:46:52.310830 systemd[1]: Stopped target slices.target. Jul 2 07:46:52.313310 systemd[1]: Stopped target sockets.target. Jul 2 07:46:52.314938 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 07:46:52.314981 systemd[1]: Closed iscsid.socket. Jul 2 07:46:52.316554 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 07:46:52.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.316628 systemd[1]: Closed iscsiuio.socket. Jul 2 07:46:52.318184 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 07:46:52.318255 systemd[1]: Stopped ignition-setup.service. Jul 2 07:46:52.319904 systemd[1]: Stopping systemd-networkd.service... Jul 2 07:46:52.321337 systemd[1]: Stopping systemd-resolved.service... Jul 2 07:46:52.324641 systemd-networkd[1105]: eth0: DHCPv6 lease lost Jul 2 07:46:52.327304 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 07:46:52.328815 systemd[1]: Stopped systemd-networkd.service. Jul 2 07:46:52.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.329000 audit: BPF prog-id=9 op=UNLOAD Jul 2 07:46:52.329941 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 07:46:52.329984 systemd[1]: Closed systemd-networkd.socket. Jul 2 07:46:52.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.336000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.332068 systemd[1]: Stopping network-cleanup.service... Jul 2 07:46:52.338000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.334659 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 07:46:52.334735 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 07:46:52.337014 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 07:46:52.337075 systemd[1]: Stopped systemd-sysctl.service. Jul 2 07:46:52.338649 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 07:46:52.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.338703 systemd[1]: Stopped systemd-modules-load.service. Jul 2 07:46:52.339808 systemd[1]: Stopping systemd-udevd.service... Jul 2 07:46:52.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.348052 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 07:46:52.354000 audit: BPF prog-id=6 op=UNLOAD Jul 2 07:46:52.348796 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 07:46:52.348914 systemd[1]: Stopped systemd-resolved.service. Jul 2 07:46:52.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.352667 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 07:46:52.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.352826 systemd[1]: Stopped systemd-udevd.service. Jul 2 07:46:52.356063 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 07:46:52.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.356117 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 07:46:52.359740 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 07:46:52.359788 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 07:46:52.361367 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 07:46:52.361429 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 07:46:52.361595 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 07:46:52.361645 systemd[1]: Stopped dracut-cmdline.service. Jul 2 07:46:52.365291 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 07:46:52.365361 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 07:46:52.372291 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 07:46:52.381475 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 2 07:46:52.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.381609 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 2 07:46:52.385561 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 07:46:52.385654 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 07:46:52.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.393296 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 07:46:52.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.393375 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 07:46:52.398652 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 2 07:46:52.400011 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 07:46:52.401563 systemd[1]: Stopped network-cleanup.service. Jul 2 07:46:52.405000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.414124 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 07:46:52.414252 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 07:46:52.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.451021 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 07:46:52.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.451144 systemd[1]: Stopped sysroot-boot.service. Jul 2 07:46:52.453090 systemd[1]: Reached target initrd-switch-root.target. Jul 2 07:46:52.455972 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 07:46:52.456059 systemd[1]: Stopped initrd-setup-root.service. Jul 2 07:46:52.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.466368 systemd[1]: Starting initrd-switch-root.service... Jul 2 07:46:52.496350 systemd[1]: Switching root. Jul 2 07:46:52.526472 iscsid[1111]: iscsid shutting down. Jul 2 07:46:52.527465 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Jul 2 07:46:52.527535 systemd-journald[185]: Journal stopped Jul 2 07:46:58.145343 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 07:46:58.145418 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 07:46:58.145444 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 07:46:58.145476 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 07:46:58.145494 kernel: SELinux: policy capability open_perms=1 Jul 2 07:46:58.145513 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 07:46:58.145531 kernel: SELinux: policy capability always_check_network=0 Jul 2 07:46:58.145549 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 07:46:58.145568 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 07:46:58.145601 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 07:46:58.145621 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 07:46:58.145643 systemd[1]: Successfully loaded SELinux policy in 90.282ms. Jul 2 07:46:58.145682 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 8.655ms. Jul 2 07:46:58.145706 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:46:58.145730 systemd[1]: Detected virtualization amazon. Jul 2 07:46:58.145751 systemd[1]: Detected architecture x86-64. Jul 2 07:46:58.145772 systemd[1]: Detected first boot. Jul 2 07:46:58.145795 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:46:58.145815 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 07:46:58.145834 systemd[1]: Populated /etc with preset unit settings. Jul 2 07:46:58.145857 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:46:58.145883 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:46:58.145905 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:46:58.145927 kernel: kauditd_printk_skb: 52 callbacks suppressed Jul 2 07:46:58.145946 kernel: audit: type=1334 audit(1719906417.836:88): prog-id=12 op=LOAD Jul 2 07:46:58.145967 kernel: audit: type=1334 audit(1719906417.836:89): prog-id=3 op=UNLOAD Jul 2 07:46:58.145986 kernel: audit: type=1334 audit(1719906417.838:90): prog-id=13 op=LOAD Jul 2 07:46:58.146001 kernel: audit: type=1334 audit(1719906417.839:91): prog-id=14 op=LOAD Jul 2 07:46:58.146023 kernel: audit: type=1334 audit(1719906417.839:92): prog-id=4 op=UNLOAD Jul 2 07:46:58.146040 kernel: audit: type=1334 audit(1719906417.839:93): prog-id=5 op=UNLOAD Jul 2 07:46:58.146057 kernel: audit: type=1334 audit(1719906417.840:94): prog-id=15 op=LOAD Jul 2 07:46:58.146075 kernel: audit: type=1334 audit(1719906417.840:95): prog-id=12 op=UNLOAD Jul 2 07:46:58.146169 kernel: audit: type=1334 audit(1719906417.841:96): prog-id=16 op=LOAD Jul 2 07:46:58.146318 kernel: audit: type=1334 audit(1719906417.842:97): prog-id=17 op=LOAD Jul 2 07:46:58.146343 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 07:46:58.146367 systemd[1]: Stopped iscsid.service. Jul 2 07:46:58.146385 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 07:46:58.146403 systemd[1]: Stopped initrd-switch-root.service. Jul 2 07:46:58.146421 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 07:46:58.146442 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 07:46:58.146461 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 07:46:58.146485 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 2 07:46:58.146505 systemd[1]: Created slice system-getty.slice. Jul 2 07:46:58.146524 systemd[1]: Created slice system-modprobe.slice. Jul 2 07:46:58.146542 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 07:46:58.146560 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 07:46:58.146592 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 07:46:58.146611 systemd[1]: Created slice user.slice. Jul 2 07:46:58.146629 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:46:58.146646 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 07:46:58.146662 systemd[1]: Set up automount boot.automount. Jul 2 07:46:58.146685 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 07:46:58.146703 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 07:46:58.146723 systemd[1]: Stopped target initrd-fs.target. Jul 2 07:46:58.146741 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 07:46:58.146759 systemd[1]: Reached target integritysetup.target. Jul 2 07:46:58.146779 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:46:58.146798 systemd[1]: Reached target remote-fs.target. Jul 2 07:46:58.146815 systemd[1]: Reached target slices.target. Jul 2 07:46:58.146837 systemd[1]: Reached target swap.target. Jul 2 07:46:58.146858 systemd[1]: Reached target torcx.target. Jul 2 07:46:58.146885 systemd[1]: Reached target veritysetup.target. Jul 2 07:46:58.146917 systemd[1]: Listening on systemd-coredump.socket. Jul 2 07:46:58.147058 systemd[1]: Listening on systemd-initctl.socket. Jul 2 07:46:58.147082 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:46:58.147105 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:46:58.147128 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:46:58.147152 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 07:46:58.147177 systemd[1]: Mounting dev-hugepages.mount... Jul 2 07:46:58.147200 systemd[1]: Mounting dev-mqueue.mount... Jul 2 07:46:58.147228 systemd[1]: Mounting media.mount... Jul 2 07:46:58.147252 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:58.147325 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 07:46:58.147358 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 07:46:58.147382 systemd[1]: Mounting tmp.mount... Jul 2 07:46:58.147406 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 07:46:58.147431 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:46:58.147458 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:46:58.147482 systemd[1]: Starting modprobe@configfs.service... Jul 2 07:46:58.147511 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:46:58.147535 systemd[1]: Starting modprobe@drm.service... Jul 2 07:46:58.147558 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:46:58.147803 systemd[1]: Starting modprobe@fuse.service... Jul 2 07:46:58.147832 systemd[1]: Starting modprobe@loop.service... Jul 2 07:46:58.147856 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 07:46:58.147892 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 07:46:58.147920 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 07:46:58.147943 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 07:46:58.147966 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 07:46:58.147988 systemd[1]: Stopped systemd-journald.service. Jul 2 07:46:58.148013 systemd[1]: Starting systemd-journald.service... Jul 2 07:46:58.148035 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:46:58.148167 systemd[1]: Starting systemd-network-generator.service... Jul 2 07:46:58.148197 systemd[1]: Starting systemd-remount-fs.service... Jul 2 07:46:58.148221 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:46:58.148244 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 07:46:58.148271 systemd[1]: Stopped verity-setup.service. Jul 2 07:46:58.148298 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:58.148411 systemd[1]: Mounted dev-hugepages.mount. Jul 2 07:46:58.148438 systemd[1]: Mounted dev-mqueue.mount. Jul 2 07:46:58.148468 systemd[1]: Mounted media.mount. Jul 2 07:46:58.148493 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 07:46:58.148520 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 07:46:58.148544 systemd[1]: Mounted tmp.mount. Jul 2 07:46:58.148567 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:46:58.165922 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 07:46:58.165954 systemd[1]: Finished modprobe@configfs.service. Jul 2 07:46:58.165974 kernel: loop: module loaded Jul 2 07:46:58.165995 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:46:58.166014 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:46:58.167305 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:46:58.167436 systemd[1]: Finished modprobe@drm.service. Jul 2 07:46:58.167462 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:46:58.167486 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:46:58.167511 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:46:58.167545 systemd[1]: Finished modprobe@loop.service. Jul 2 07:46:58.167573 systemd[1]: Finished systemd-network-generator.service. Jul 2 07:46:58.167609 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:46:58.167634 systemd[1]: Finished systemd-remount-fs.service. Jul 2 07:46:58.167657 kernel: fuse: init (API version 7.34) Jul 2 07:46:58.167681 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 07:46:58.167707 systemd[1]: Finished modprobe@fuse.service. Jul 2 07:46:58.167731 systemd[1]: Reached target network-pre.target. Jul 2 07:46:58.167754 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 07:46:58.167778 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 07:46:58.167803 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 07:46:58.167826 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 07:46:58.167853 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:46:58.167875 systemd[1]: Starting systemd-random-seed.service... Jul 2 07:46:58.167901 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:46:58.167983 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:46:58.168011 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 07:46:58.168143 systemd-journald[1408]: Journal started Jul 2 07:46:58.168237 systemd-journald[1408]: Runtime Journal (/run/log/journal/ec2fccd8cb10cb5f212121414124d1a4) is 4.8M, max 38.7M, 33.9M free. Jul 2 07:46:53.209000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 07:46:53.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:46:53.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:46:53.394000 audit: BPF prog-id=10 op=LOAD Jul 2 07:46:53.394000 audit: BPF prog-id=10 op=UNLOAD Jul 2 07:46:53.394000 audit: BPF prog-id=11 op=LOAD Jul 2 07:46:58.190415 systemd[1]: Started systemd-journald.service. Jul 2 07:46:53.394000 audit: BPF prog-id=11 op=UNLOAD Jul 2 07:46:53.632000 audit[1332]: AVC avc: denied { associate } for pid=1332 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 07:46:53.632000 audit[1332]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8b2 a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=1315 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.632000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:46:53.635000 audit[1332]: AVC avc: denied { associate } for pid=1332 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 07:46:53.635000 audit[1332]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d989 a2=1ed a3=0 items=2 ppid=1315 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.635000 audit: CWD cwd="/" Jul 2 07:46:53.635000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:53.635000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:53.635000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:46:57.836000 audit: BPF prog-id=12 op=LOAD Jul 2 07:46:57.836000 audit: BPF prog-id=3 op=UNLOAD Jul 2 07:46:57.838000 audit: BPF prog-id=13 op=LOAD Jul 2 07:46:57.839000 audit: BPF prog-id=14 op=LOAD Jul 2 07:46:57.839000 audit: BPF prog-id=4 op=UNLOAD Jul 2 07:46:57.839000 audit: BPF prog-id=5 op=UNLOAD Jul 2 07:46:57.840000 audit: BPF prog-id=15 op=LOAD Jul 2 07:46:57.840000 audit: BPF prog-id=12 op=UNLOAD Jul 2 07:46:57.841000 audit: BPF prog-id=16 op=LOAD Jul 2 07:46:57.842000 audit: BPF prog-id=17 op=LOAD Jul 2 07:46:57.842000 audit: BPF prog-id=13 op=UNLOAD Jul 2 07:46:57.842000 audit: BPF prog-id=14 op=UNLOAD Jul 2 07:46:57.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:57.850000 audit: BPF prog-id=15 op=UNLOAD Jul 2 07:46:57.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:57.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:57.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.024000 audit: BPF prog-id=18 op=LOAD Jul 2 07:46:58.025000 audit: BPF prog-id=19 op=LOAD Jul 2 07:46:58.025000 audit: BPF prog-id=20 op=LOAD Jul 2 07:46:58.025000 audit: BPF prog-id=16 op=UNLOAD Jul 2 07:46:58.025000 audit: BPF prog-id=17 op=UNLOAD Jul 2 07:46:58.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.079000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.140000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 07:46:58.140000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7fff407e3a80 a2=4000 a3=7fff407e3b1c items=0 ppid=1 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:58.140000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 07:46:58.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:57.835465 systemd[1]: Queued start job for default target multi-user.target. Jul 2 07:46:53.621307 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:46:57.845124 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 07:46:53.622304 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:46:58.171819 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 07:46:53.622334 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:46:58.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.219827 systemd-journald[1408]: Time spent on flushing to /var/log/journal/ec2fccd8cb10cb5f212121414124d1a4 is 71.392ms for 1174 entries. Jul 2 07:46:58.219827 systemd-journald[1408]: System Journal (/var/log/journal/ec2fccd8cb10cb5f212121414124d1a4) is 8.0M, max 195.6M, 187.6M free. Jul 2 07:46:58.302884 systemd-journald[1408]: Received client request to flush runtime journal. Jul 2 07:46:58.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.176390 systemd[1]: Starting systemd-journal-flush.service... Jul 2 07:46:53.622379 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 07:46:58.200679 systemd[1]: Finished systemd-random-seed.service. Jul 2 07:46:53.622396 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 07:46:58.201978 systemd[1]: Reached target first-boot-complete.target. Jul 2 07:46:53.622441 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 07:46:58.247919 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:46:53.622461 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 07:46:58.274133 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:46:53.622838 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 07:46:58.277007 systemd[1]: Starting systemd-udev-settle.service... Jul 2 07:46:53.622896 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:46:58.301801 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 07:46:53.622937 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:46:58.304628 systemd[1]: Starting systemd-sysusers.service... Jul 2 07:46:53.624516 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 07:46:53.624570 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 07:46:53.624623 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 07:46:53.624647 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 07:46:53.624675 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 07:46:58.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:53.624697 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:53Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 07:46:57.182461 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:57Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:57.182773 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:57Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:57.182889 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:57Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:57.183094 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:57Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:57.183145 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:57Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 07:46:57.183203 /usr/lib/systemd/system-generators/torcx-generator[1332]: time="2024-07-02T07:46:57Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 07:46:58.307029 udevadm[1441]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 2 07:46:58.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.311318 systemd[1]: Finished systemd-journal-flush.service. Jul 2 07:46:58.436889 systemd[1]: Finished systemd-sysusers.service. Jul 2 07:46:58.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.439569 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 07:46:58.521800 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 07:46:58.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.994447 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 07:46:58.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:58.994000 audit: BPF prog-id=21 op=LOAD Jul 2 07:46:58.994000 audit: BPF prog-id=22 op=LOAD Jul 2 07:46:58.994000 audit: BPF prog-id=7 op=UNLOAD Jul 2 07:46:58.994000 audit: BPF prog-id=8 op=UNLOAD Jul 2 07:46:58.997177 systemd[1]: Starting systemd-udevd.service... Jul 2 07:46:59.015931 systemd-udevd[1451]: Using default interface naming scheme 'v252'. Jul 2 07:46:59.061075 systemd[1]: Started systemd-udevd.service. Jul 2 07:46:59.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.062000 audit: BPF prog-id=23 op=LOAD Jul 2 07:46:59.065343 systemd[1]: Starting systemd-networkd.service... Jul 2 07:46:59.083000 audit: BPF prog-id=24 op=LOAD Jul 2 07:46:59.083000 audit: BPF prog-id=25 op=LOAD Jul 2 07:46:59.083000 audit: BPF prog-id=26 op=LOAD Jul 2 07:46:59.085986 systemd[1]: Starting systemd-userdbd.service... Jul 2 07:46:59.122714 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 07:46:59.137955 (udev-worker)[1452]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:46:59.148379 systemd[1]: Started systemd-userdbd.service. Jul 2 07:46:59.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.227608 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 2 07:46:59.235258 kernel: ACPI: button: Power Button [PWRF] Jul 2 07:46:59.235363 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Jul 2 07:46:59.236333 kernel: ACPI: button: Sleep Button [SLPF] Jul 2 07:46:59.237000 audit[1466]: AVC avc: denied { confidentiality } for pid=1466 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 07:46:59.281459 systemd-networkd[1457]: lo: Link UP Jul 2 07:46:59.281476 systemd-networkd[1457]: lo: Gained carrier Jul 2 07:46:59.282100 systemd-networkd[1457]: Enumeration completed Jul 2 07:46:59.282234 systemd[1]: Started systemd-networkd.service. Jul 2 07:46:59.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.282465 systemd-networkd[1457]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:46:59.285046 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 07:46:59.288606 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:46:59.292868 systemd-networkd[1457]: eth0: Link UP Jul 2 07:46:59.293058 systemd-networkd[1457]: eth0: Gained carrier Jul 2 07:46:59.302771 systemd-networkd[1457]: eth0: DHCPv4 address 172.31.20.37/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 2 07:46:59.237000 audit[1466]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55e4aad39960 a1=3207c a2=7f9cbec54bc5 a3=5 items=108 ppid=1451 pid=1466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:59.237000 audit: CWD cwd="/" Jul 2 07:46:59.237000 audit: PATH item=0 name=(null) inode=1056 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=1 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=2 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=3 name=(null) inode=15059 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=4 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=5 name=(null) inode=15060 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=6 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=7 name=(null) inode=15061 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=8 name=(null) inode=15061 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=9 name=(null) inode=15062 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=10 name=(null) inode=15061 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=11 name=(null) inode=15063 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=12 name=(null) inode=15061 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=13 name=(null) inode=15064 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=14 name=(null) inode=15061 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=15 name=(null) inode=15065 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=16 name=(null) inode=15061 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=17 name=(null) inode=15066 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=18 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=19 name=(null) inode=15067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=20 name=(null) inode=15067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=21 name=(null) inode=15068 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=22 name=(null) inode=15067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=23 name=(null) inode=15069 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=24 name=(null) inode=15067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=25 name=(null) inode=15070 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=26 name=(null) inode=15067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=27 name=(null) inode=15071 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=28 name=(null) inode=15067 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=29 name=(null) inode=15072 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=30 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=31 name=(null) inode=15073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=32 name=(null) inode=15073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=33 name=(null) inode=15074 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=34 name=(null) inode=15073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=35 name=(null) inode=15075 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=36 name=(null) inode=15073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=37 name=(null) inode=15076 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=38 name=(null) inode=15073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=39 name=(null) inode=15077 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=40 name=(null) inode=15073 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=41 name=(null) inode=15078 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=42 name=(null) inode=15058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=43 name=(null) inode=15079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=44 name=(null) inode=15079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=45 name=(null) inode=15080 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=46 name=(null) inode=15079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=47 name=(null) inode=15081 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=48 name=(null) inode=15079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=49 name=(null) inode=15082 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=50 name=(null) inode=15079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=51 name=(null) inode=15083 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=52 name=(null) inode=15079 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=53 name=(null) inode=15084 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=54 name=(null) inode=1056 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=55 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=56 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=57 name=(null) inode=15086 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=58 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=59 name=(null) inode=15087 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=60 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=61 name=(null) inode=15088 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=62 name=(null) inode=15088 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=63 name=(null) inode=15089 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=64 name=(null) inode=15088 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=65 name=(null) inode=15090 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=66 name=(null) inode=15088 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=67 name=(null) inode=15091 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=68 name=(null) inode=15088 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=69 name=(null) inode=15092 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=70 name=(null) inode=15088 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=71 name=(null) inode=15093 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=72 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=73 name=(null) inode=15094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=74 name=(null) inode=15094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=75 name=(null) inode=15095 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=76 name=(null) inode=15094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=77 name=(null) inode=15096 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=78 name=(null) inode=15094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=79 name=(null) inode=15097 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=80 name=(null) inode=15094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=81 name=(null) inode=15098 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=82 name=(null) inode=15094 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=83 name=(null) inode=15099 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=84 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=85 name=(null) inode=15100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=86 name=(null) inode=15100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=87 name=(null) inode=15101 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=88 name=(null) inode=15100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=89 name=(null) inode=15102 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=90 name=(null) inode=15100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=91 name=(null) inode=15103 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=92 name=(null) inode=15100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=93 name=(null) inode=15104 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=94 name=(null) inode=15100 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=95 name=(null) inode=15105 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=96 name=(null) inode=15085 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=97 name=(null) inode=15106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=98 name=(null) inode=15106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=99 name=(null) inode=15107 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=100 name=(null) inode=15106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=101 name=(null) inode=15108 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=102 name=(null) inode=15106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=103 name=(null) inode=15109 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=104 name=(null) inode=15106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=105 name=(null) inode=15110 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=106 name=(null) inode=15106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PATH item=107 name=(null) inode=15111 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:59.237000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 07:46:59.319614 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Jul 2 07:46:59.328921 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 07:46:59.329031 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Jul 2 07:46:59.365630 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1456) Jul 2 07:46:59.466347 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:46:59.532335 systemd[1]: Finished systemd-udev-settle.service. Jul 2 07:46:59.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.535358 systemd[1]: Starting lvm2-activation-early.service... Jul 2 07:46:59.598759 lvm[1565]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:46:59.630926 systemd[1]: Finished lvm2-activation-early.service. Jul 2 07:46:59.631000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.632896 systemd[1]: Reached target cryptsetup.target. Jul 2 07:46:59.635567 systemd[1]: Starting lvm2-activation.service... Jul 2 07:46:59.643663 lvm[1566]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:46:59.670003 systemd[1]: Finished lvm2-activation.service. Jul 2 07:46:59.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.671209 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:46:59.672418 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 07:46:59.672455 systemd[1]: Reached target local-fs.target. Jul 2 07:46:59.673318 systemd[1]: Reached target machines.target. Jul 2 07:46:59.675921 systemd[1]: Starting ldconfig.service... Jul 2 07:46:59.677778 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:46:59.677956 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:59.679624 systemd[1]: Starting systemd-boot-update.service... Jul 2 07:46:59.682323 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 07:46:59.684809 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 07:46:59.689907 systemd[1]: Starting systemd-sysext.service... Jul 2 07:46:59.695414 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1568 (bootctl) Jul 2 07:46:59.697687 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 07:46:59.734386 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 07:46:59.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.747650 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 07:46:59.766089 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 07:46:59.766465 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 07:46:59.781622 kernel: loop0: detected capacity change from 0 to 211296 Jul 2 07:46:59.897958 systemd-fsck[1576]: fsck.fat 4.2 (2021-01-31) Jul 2 07:46:59.897958 systemd-fsck[1576]: /dev/nvme0n1p1: 789 files, 119238/258078 clusters Jul 2 07:46:59.903360 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 07:46:59.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:59.907360 systemd[1]: Mounting boot.mount... Jul 2 07:46:59.924197 systemd[1]: Mounted boot.mount. Jul 2 07:46:59.962770 systemd[1]: Finished systemd-boot-update.service. Jul 2 07:46:59.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.226605 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 07:47:00.265608 kernel: loop1: detected capacity change from 0 to 211296 Jul 2 07:47:00.288208 (sd-sysext)[1593]: Using extensions 'kubernetes'. Jul 2 07:47:00.288841 (sd-sysext)[1593]: Merged extensions into '/usr'. Jul 2 07:47:00.324232 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.327435 systemd[1]: Mounting usr-share-oem.mount... Jul 2 07:47:00.328717 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.333397 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:47:00.337782 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:47:00.340612 systemd[1]: Starting modprobe@loop.service... Jul 2 07:47:00.341518 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.341727 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:47:00.342166 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.347326 systemd[1]: Mounted usr-share-oem.mount. Jul 2 07:47:00.348882 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:47:00.349078 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:47:00.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.350427 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:47:00.350615 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:47:00.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.352182 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:47:00.352332 systemd[1]: Finished modprobe@loop.service. Jul 2 07:47:00.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.354320 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:47:00.354487 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.360288 systemd[1]: Finished systemd-sysext.service. Jul 2 07:47:00.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.367944 systemd[1]: Starting ensure-sysext.service... Jul 2 07:47:00.377157 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 07:47:00.398744 systemd[1]: Reloading. Jul 2 07:47:00.413031 systemd-tmpfiles[1600]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 07:47:00.417052 systemd-tmpfiles[1600]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 07:47:00.424239 systemd-tmpfiles[1600]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 07:47:00.547005 /usr/lib/systemd/system-generators/torcx-generator[1619]: time="2024-07-02T07:47:00Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:47:00.549729 /usr/lib/systemd/system-generators/torcx-generator[1619]: time="2024-07-02T07:47:00Z" level=info msg="torcx already run" Jul 2 07:47:00.769395 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:47:00.769419 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:47:00.793874 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:47:00.884000 audit: BPF prog-id=27 op=LOAD Jul 2 07:47:00.884000 audit: BPF prog-id=24 op=UNLOAD Jul 2 07:47:00.884000 audit: BPF prog-id=28 op=LOAD Jul 2 07:47:00.884000 audit: BPF prog-id=29 op=LOAD Jul 2 07:47:00.884000 audit: BPF prog-id=25 op=UNLOAD Jul 2 07:47:00.884000 audit: BPF prog-id=26 op=UNLOAD Jul 2 07:47:00.886000 audit: BPF prog-id=30 op=LOAD Jul 2 07:47:00.886000 audit: BPF prog-id=23 op=UNLOAD Jul 2 07:47:00.887000 audit: BPF prog-id=31 op=LOAD Jul 2 07:47:00.887000 audit: BPF prog-id=32 op=LOAD Jul 2 07:47:00.887000 audit: BPF prog-id=21 op=UNLOAD Jul 2 07:47:00.887000 audit: BPF prog-id=22 op=UNLOAD Jul 2 07:47:00.890000 audit: BPF prog-id=33 op=LOAD Jul 2 07:47:00.890000 audit: BPF prog-id=18 op=UNLOAD Jul 2 07:47:00.890000 audit: BPF prog-id=34 op=LOAD Jul 2 07:47:00.890000 audit: BPF prog-id=35 op=LOAD Jul 2 07:47:00.890000 audit: BPF prog-id=19 op=UNLOAD Jul 2 07:47:00.890000 audit: BPF prog-id=20 op=UNLOAD Jul 2 07:47:00.896170 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 07:47:00.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.902974 systemd[1]: Starting audit-rules.service... Jul 2 07:47:00.908315 systemd[1]: Starting clean-ca-certificates.service... Jul 2 07:47:00.912000 audit: BPF prog-id=36 op=LOAD Jul 2 07:47:00.911392 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 07:47:00.915878 systemd[1]: Starting systemd-resolved.service... Jul 2 07:47:00.917000 audit: BPF prog-id=37 op=LOAD Jul 2 07:47:00.920829 systemd[1]: Starting systemd-timesyncd.service... Jul 2 07:47:00.923699 systemd[1]: Starting systemd-update-utmp.service... Jul 2 07:47:00.940032 systemd[1]: Finished clean-ca-certificates.service. Jul 2 07:47:00.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.943941 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.944383 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.946864 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:47:00.950060 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:47:00.953784 systemd[1]: Starting modprobe@loop.service... Jul 2 07:47:00.954686 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.954884 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:47:00.955092 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:47:00.955218 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.956674 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:47:00.956880 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:47:00.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.971297 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.971776 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.975617 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:47:00.976682 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.976876 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:47:00.977069 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:47:00.977196 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.979344 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:47:00.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.979549 systemd[1]: Finished modprobe@loop.service. Jul 2 07:47:00.985807 systemd-networkd[1457]: eth0: Gained IPv6LL Jul 2 07:47:00.986524 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.987092 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.989764 systemd[1]: Starting modprobe@drm.service... Jul 2 07:47:00.994220 systemd[1]: Starting modprobe@loop.service... Jul 2 07:47:00.995968 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:47:00.996175 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:47:00.996414 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:47:00.996553 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:47:00.997922 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:47:00.998143 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:47:00.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:00.999866 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 07:47:00.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.001352 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:47:01.007895 ldconfig[1567]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 07:47:01.006000 audit[1678]: SYSTEM_BOOT pid=1678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.010042 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:47:01.010243 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:47:01.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.012005 systemd[1]: Finished ensure-sysext.service. Jul 2 07:47:01.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.015808 systemd[1]: Finished systemd-update-utmp.service. Jul 2 07:47:01.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.037033 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:47:01.037214 systemd[1]: Finished modprobe@drm.service. Jul 2 07:47:01.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.037000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.039953 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:47:01.040124 systemd[1]: Finished modprobe@loop.service. Jul 2 07:47:01.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.041209 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:47:01.041561 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 07:47:01.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.091982 systemd[1]: Finished ldconfig.service. Jul 2 07:47:01.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.104142 systemd[1]: Starting systemd-update-done.service... Jul 2 07:47:01.127135 systemd[1]: Finished systemd-update-done.service. Jul 2 07:47:01.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:01.129094 augenrules[1700]: No rules Jul 2 07:47:01.127000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 07:47:01.127000 audit[1700]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe862a15a0 a2=420 a3=0 items=0 ppid=1673 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:01.127000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 07:47:01.130431 systemd[1]: Finished audit-rules.service. Jul 2 07:47:01.138227 systemd[1]: Started systemd-timesyncd.service. Jul 2 07:47:01.139291 systemd[1]: Reached target time-set.target. Jul 2 07:47:01.155859 systemd-resolved[1676]: Positive Trust Anchors: Jul 2 07:47:01.155876 systemd-resolved[1676]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:47:01.155918 systemd-resolved[1676]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:47:01.210151 systemd-resolved[1676]: Defaulting to hostname 'linux'. Jul 2 07:47:01.212360 systemd[1]: Started systemd-resolved.service. Jul 2 07:47:01.213375 systemd[1]: Reached target network.target. Jul 2 07:47:01.214204 systemd[1]: Reached target network-online.target. Jul 2 07:47:01.215072 systemd[1]: Reached target nss-lookup.target. Jul 2 07:47:01.215993 systemd[1]: Reached target sysinit.target. Jul 2 07:47:01.216938 systemd[1]: Started motdgen.path. Jul 2 07:47:01.217713 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 07:47:01.221200 systemd[1]: Started logrotate.timer. Jul 2 07:47:01.222270 systemd[1]: Started mdadm.timer. Jul 2 07:47:01.223221 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 07:47:01.224086 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 07:47:01.224114 systemd[1]: Reached target paths.target. Jul 2 07:47:01.224985 systemd[1]: Reached target timers.target. Jul 2 07:47:01.226106 systemd[1]: Listening on dbus.socket. Jul 2 07:47:01.228009 systemd[1]: Starting docker.socket... Jul 2 07:47:01.231773 systemd[1]: Listening on sshd.socket. Jul 2 07:47:01.232850 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:47:01.233403 systemd[1]: Listening on docker.socket. Jul 2 07:47:01.234383 systemd[1]: Reached target sockets.target. Jul 2 07:47:01.235340 systemd[1]: Reached target basic.target. Jul 2 07:47:01.236170 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:47:01.236202 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:47:01.237459 systemd[1]: Started amazon-ssm-agent.service. Jul 2 07:47:01.239907 systemd[1]: Starting containerd.service... Jul 2 07:47:01.241941 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 2 07:47:01.245801 systemd[1]: Starting dbus.service... Jul 2 07:47:01.249276 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 07:47:01.251554 systemd[1]: Starting extend-filesystems.service... Jul 2 07:47:01.252675 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 07:47:01.256760 systemd[1]: Starting kubelet.service... Jul 2 07:47:01.260210 systemd[1]: Starting motdgen.service... Jul 2 07:47:01.262254 systemd[1]: Started nvidia.service. Jul 2 07:47:01.275738 systemd[1]: Starting prepare-helm.service... Jul 2 07:47:01.277793 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 07:47:01.284074 systemd[1]: Starting sshd-keygen.service... Jul 2 07:47:01.291386 systemd[1]: Starting systemd-logind.service... Jul 2 07:47:01.292309 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:47:01.292372 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 07:47:01.292864 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 07:47:01.317258 jq[1712]: false Jul 2 07:47:01.293683 systemd[1]: Starting update-engine.service... Jul 2 07:47:01.298727 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 07:47:01.323186 jq[1723]: true Jul 2 07:47:01.315708 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 07:47:01.315882 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 07:47:01.424078 tar[1726]: linux-amd64/helm Jul 2 07:47:01.991415 jq[1730]: true Jul 2 07:47:01.350281 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 07:47:01.350453 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 07:47:01.985481 systemd-timesyncd[1677]: Contacted time server 162.159.200.1:123 (0.flatcar.pool.ntp.org). Jul 2 07:47:01.986315 systemd-timesyncd[1677]: Initial clock synchronization to Tue 2024-07-02 07:47:01.984799 UTC. Jul 2 07:47:01.986398 systemd-resolved[1676]: Clock change detected. Flushing caches. Jul 2 07:47:02.029256 dbus-daemon[1711]: [system] SELinux support is enabled Jul 2 07:47:02.029912 systemd[1]: Started dbus.service. Jul 2 07:47:02.034182 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 07:47:02.034263 systemd[1]: Reached target system-config.target. Jul 2 07:47:02.036810 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 07:47:02.036849 systemd[1]: Reached target user-config.target. Jul 2 07:47:02.037398 dbus-daemon[1711]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1457 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jul 2 07:47:02.042883 dbus-daemon[1711]: [system] Successfully activated service 'org.freedesktop.systemd1' Jul 2 07:47:02.048663 systemd[1]: Starting systemd-hostnamed.service... Jul 2 07:47:02.100826 extend-filesystems[1713]: Found loop1 Jul 2 07:47:02.101957 extend-filesystems[1713]: Found nvme0n1 Jul 2 07:47:02.101957 extend-filesystems[1713]: Found nvme0n1p1 Jul 2 07:47:02.101957 extend-filesystems[1713]: Found nvme0n1p2 Jul 2 07:47:02.101957 extend-filesystems[1713]: Found nvme0n1p3 Jul 2 07:47:02.101957 extend-filesystems[1713]: Found usr Jul 2 07:47:02.101957 extend-filesystems[1713]: Found nvme0n1p4 Jul 2 07:47:02.174292 extend-filesystems[1713]: Found nvme0n1p6 Jul 2 07:47:02.174292 extend-filesystems[1713]: Found nvme0n1p7 Jul 2 07:47:02.174292 extend-filesystems[1713]: Found nvme0n1p9 Jul 2 07:47:02.174292 extend-filesystems[1713]: Checking size of /dev/nvme0n1p9 Jul 2 07:47:02.125720 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 07:47:02.125943 systemd[1]: Finished motdgen.service. Jul 2 07:47:02.209400 amazon-ssm-agent[1708]: 2024/07/02 07:47:02 Failed to load instance info from vault. RegistrationKey does not exist. Jul 2 07:47:02.237648 amazon-ssm-agent[1708]: Initializing new seelog logger Jul 2 07:47:02.237648 amazon-ssm-agent[1708]: New Seelog Logger Creation Complete Jul 2 07:47:02.237648 amazon-ssm-agent[1708]: 2024/07/02 07:47:02 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Jul 2 07:47:02.237648 amazon-ssm-agent[1708]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Jul 2 07:47:02.237648 amazon-ssm-agent[1708]: 2024/07/02 07:47:02 processing appconfig overrides Jul 2 07:47:02.238743 env[1727]: time="2024-07-02T07:47:02.238117486Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 07:47:02.244351 extend-filesystems[1713]: Resized partition /dev/nvme0n1p9 Jul 2 07:47:02.284216 extend-filesystems[1783]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 07:47:02.294776 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Jul 2 07:47:02.293363 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 07:47:02.295665 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 07:47:02.296052 bash[1772]: Updated "/home/core/.ssh/authorized_keys" Jul 2 07:47:02.299081 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 07:47:02.303049 update_engine[1722]: I0702 07:47:02.300743 1722 main.cc:92] Flatcar Update Engine starting Jul 2 07:47:02.315658 systemd[1]: Started update-engine.service. Jul 2 07:47:02.316462 update_engine[1722]: I0702 07:47:02.316020 1722 update_check_scheduler.cc:74] Next update check in 8m49s Jul 2 07:47:02.320245 systemd[1]: Started locksmithd.service. Jul 2 07:47:02.390367 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Jul 2 07:47:02.434498 extend-filesystems[1783]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Jul 2 07:47:02.434498 extend-filesystems[1783]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 2 07:47:02.434498 extend-filesystems[1783]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Jul 2 07:47:02.434137 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 07:47:02.444487 extend-filesystems[1713]: Resized filesystem in /dev/nvme0n1p9 Jul 2 07:47:02.434397 systemd[1]: Finished extend-filesystems.service. Jul 2 07:47:02.439240 systemd-logind[1720]: Watching system buttons on /dev/input/event1 (Power Button) Jul 2 07:47:02.440782 systemd-logind[1720]: Watching system buttons on /dev/input/event2 (Sleep Button) Jul 2 07:47:02.440809 systemd-logind[1720]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 2 07:47:02.444656 systemd-logind[1720]: New seat seat0. Jul 2 07:47:02.450721 systemd[1]: Started systemd-logind.service. Jul 2 07:47:02.483919 systemd[1]: nvidia.service: Deactivated successfully. Jul 2 07:47:02.521288 env[1727]: time="2024-07-02T07:47:02.520873295Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 07:47:02.521288 env[1727]: time="2024-07-02T07:47:02.521075188Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:47:02.522277 dbus-daemon[1711]: [system] Successfully activated service 'org.freedesktop.hostname1' Jul 2 07:47:02.522706 systemd[1]: Started systemd-hostnamed.service. Jul 2 07:47:02.524029 dbus-daemon[1711]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1758 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jul 2 07:47:02.524439 env[1727]: time="2024-07-02T07:47:02.524354144Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:47:02.524439 env[1727]: time="2024-07-02T07:47:02.524397184Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.524709256Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.524738291Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.524758282Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.524774983Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.524881673Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.525233599Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.525447432Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.525474624Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.525543259Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 07:47:02.530633 env[1727]: time="2024-07-02T07:47:02.525560136Z" level=info msg="metadata content store policy set" policy=shared Jul 2 07:47:02.528186 systemd[1]: Starting polkit.service... Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548303912Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548374349Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548399465Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548451177Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548473214Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548491359Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548509182Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548532548Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548551762Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548569136Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548587596Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548606319Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548764272Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 07:47:02.549360 env[1727]: time="2024-07-02T07:47:02.548867737Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 07:47:02.549977 env[1727]: time="2024-07-02T07:47:02.549210587Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 07:47:02.549977 env[1727]: time="2024-07-02T07:47:02.549250206Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.549977 env[1727]: time="2024-07-02T07:47:02.549272863Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 07:47:02.550174 env[1727]: time="2024-07-02T07:47:02.550149987Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550259 env[1727]: time="2024-07-02T07:47:02.550244356Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550350 env[1727]: time="2024-07-02T07:47:02.550316737Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550433 env[1727]: time="2024-07-02T07:47:02.550419601Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550504 env[1727]: time="2024-07-02T07:47:02.550491355Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550573 env[1727]: time="2024-07-02T07:47:02.550560406Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550647 env[1727]: time="2024-07-02T07:47:02.550634863Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550715 env[1727]: time="2024-07-02T07:47:02.550702604Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.550797 env[1727]: time="2024-07-02T07:47:02.550783835Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 07:47:02.551158 env[1727]: time="2024-07-02T07:47:02.551134529Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.551277 env[1727]: time="2024-07-02T07:47:02.551260840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.551598 env[1727]: time="2024-07-02T07:47:02.551576434Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.551703 env[1727]: time="2024-07-02T07:47:02.551685611Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 07:47:02.551816 env[1727]: time="2024-07-02T07:47:02.551794692Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 07:47:02.552073 env[1727]: time="2024-07-02T07:47:02.552052579Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 07:47:02.552179 env[1727]: time="2024-07-02T07:47:02.552162911Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 07:47:02.552303 env[1727]: time="2024-07-02T07:47:02.552286428Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 07:47:02.552981 env[1727]: time="2024-07-02T07:47:02.552899976Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 07:47:02.555951 polkitd[1802]: Started polkitd version 121 Jul 2 07:47:02.556454 env[1727]: time="2024-07-02T07:47:02.556278798Z" level=info msg="Connect containerd service" Jul 2 07:47:02.556454 env[1727]: time="2024-07-02T07:47:02.556376796Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 07:47:02.557268 env[1727]: time="2024-07-02T07:47:02.557236900Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:47:02.571646 env[1727]: time="2024-07-02T07:47:02.571060724Z" level=info msg="Start subscribing containerd event" Jul 2 07:47:02.571646 env[1727]: time="2024-07-02T07:47:02.571149601Z" level=info msg="Start recovering state" Jul 2 07:47:02.571646 env[1727]: time="2024-07-02T07:47:02.571236365Z" level=info msg="Start event monitor" Jul 2 07:47:02.571646 env[1727]: time="2024-07-02T07:47:02.571261486Z" level=info msg="Start snapshots syncer" Jul 2 07:47:02.571646 env[1727]: time="2024-07-02T07:47:02.571275948Z" level=info msg="Start cni network conf syncer for default" Jul 2 07:47:02.571646 env[1727]: time="2024-07-02T07:47:02.571288535Z" level=info msg="Start streaming server" Jul 2 07:47:02.576905 polkitd[1802]: Loading rules from directory /etc/polkit-1/rules.d Jul 2 07:47:02.577175 polkitd[1802]: Loading rules from directory /usr/share/polkit-1/rules.d Jul 2 07:47:02.578210 env[1727]: time="2024-07-02T07:47:02.578173495Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 07:47:02.578337 env[1727]: time="2024-07-02T07:47:02.578253919Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 07:47:02.581025 polkitd[1802]: Finished loading, compiling and executing 2 rules Jul 2 07:47:02.589879 dbus-daemon[1711]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jul 2 07:47:02.590254 systemd[1]: Started polkit.service. Jul 2 07:47:02.592984 polkitd[1802]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jul 2 07:47:02.609010 systemd[1]: Started containerd.service. Jul 2 07:47:02.611460 env[1727]: time="2024-07-02T07:47:02.611408128Z" level=info msg="containerd successfully booted in 0.376560s" Jul 2 07:47:02.612829 systemd-hostnamed[1758]: Hostname set to (transient) Jul 2 07:47:02.612968 systemd-resolved[1676]: System hostname changed to 'ip-172-31-20-37'. Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Create new startup processor Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [LongRunningPluginsManager] registered plugins: {} Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing bookkeeping folders Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO removing the completed state files Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing bookkeeping folders for long running plugins Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing healthcheck folders for long running plugins Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing locations for inventory plugin Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing default location for custom inventory Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing default location for file inventory Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Initializing default location for role inventory Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Init the cloudwatchlogs publisher Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:downloadContent Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:runDocument Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:runPowerShellScript Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:runDockerAction Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:configurePackage Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:refreshAssociation Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:softwareInventory Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:updateSsmAgent Jul 2 07:47:03.036359 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform independent plugin aws:configureDocker Jul 2 07:47:03.037337 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Successfully loaded platform dependent plugin aws:runShellScript Jul 2 07:47:03.037337 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Jul 2 07:47:03.037337 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO OS: linux, Arch: amd64 Jul 2 07:47:03.038355 amazon-ssm-agent[1708]: datastore file /var/lib/amazon/ssm/i-09c3dabcb9f3a7286/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Jul 2 07:47:03.070609 coreos-metadata[1710]: Jul 02 07:47:03.070 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Jul 2 07:47:03.073740 coreos-metadata[1710]: Jul 02 07:47:03.073 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Jul 2 07:47:03.075449 coreos-metadata[1710]: Jul 02 07:47:03.075 INFO Fetch successful Jul 2 07:47:03.075676 coreos-metadata[1710]: Jul 02 07:47:03.075 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 2 07:47:03.076521 coreos-metadata[1710]: Jul 02 07:47:03.076 INFO Fetch successful Jul 2 07:47:03.086389 unknown[1710]: wrote ssh authorized keys file for user: core Jul 2 07:47:03.121865 update-ssh-keys[1887]: Updated "/home/core/.ssh/authorized_keys" Jul 2 07:47:03.122827 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 2 07:47:03.135622 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] Starting document processing engine... Jul 2 07:47:03.230494 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [EngineProcessor] Starting Jul 2 07:47:03.324849 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Jul 2 07:47:03.419343 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] Starting message polling Jul 2 07:47:03.513980 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] Starting send replies to MDS Jul 2 07:47:03.523760 tar[1726]: linux-amd64/LICENSE Jul 2 07:47:03.525540 tar[1726]: linux-amd64/README.md Jul 2 07:47:03.534169 systemd[1]: Finished prepare-helm.service. Jul 2 07:47:03.608938 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [instanceID=i-09c3dabcb9f3a7286] Starting association polling Jul 2 07:47:03.705233 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Jul 2 07:47:03.802051 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [Association] Launching response handler Jul 2 07:47:03.895415 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Jul 2 07:47:03.977724 locksmithd[1790]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 07:47:03.992569 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Jul 2 07:47:04.088882 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Jul 2 07:47:04.116729 systemd[1]: Started kubelet.service. Jul 2 07:47:04.185033 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] Starting session document processing engine... Jul 2 07:47:04.281292 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] [EngineProcessor] Starting Jul 2 07:47:04.378715 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Jul 2 07:47:04.475519 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-09c3dabcb9f3a7286, requestId: dccba6ff-53da-4511-99d8-977eae62906d Jul 2 07:47:04.572229 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [OfflineService] Starting document processing engine... Jul 2 07:47:04.669665 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [OfflineService] [EngineProcessor] Starting Jul 2 07:47:04.767780 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [OfflineService] [EngineProcessor] Initial processing Jul 2 07:47:04.864076 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [OfflineService] Starting message polling Jul 2 07:47:04.961725 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [OfflineService] Starting send replies to MDS Jul 2 07:47:05.018618 kubelet[1910]: E0702 07:47:05.018493 1910 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:47:05.021413 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:47:05.021585 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:47:05.021887 systemd[1]: kubelet.service: Consumed 1.278s CPU time. Jul 2 07:47:05.059573 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] listening reply. Jul 2 07:47:05.157856 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [LongRunningPluginsManager] starting long running plugin manager Jul 2 07:47:05.256083 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Jul 2 07:47:05.354616 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [HealthCheck] HealthCheck reporting agent health. Jul 2 07:47:05.458100 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Jul 2 07:47:05.556954 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [StartupProcessor] Executing startup processor tasks Jul 2 07:47:05.655985 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Jul 2 07:47:05.755214 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Jul 2 07:47:05.854656 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.5 Jul 2 07:47:05.954340 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-09c3dabcb9f3a7286?role=subscribe&stream=input Jul 2 07:47:06.054109 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-09c3dabcb9f3a7286?role=subscribe&stream=input Jul 2 07:47:06.154117 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] Starting receiving message from control channel Jul 2 07:47:06.254410 amazon-ssm-agent[1708]: 2024-07-02 07:47:03 INFO [MessageGatewayService] [EngineProcessor] Initial processing Jul 2 07:47:06.293645 sshd_keygen[1754]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 07:47:06.317014 systemd[1]: Finished sshd-keygen.service. Jul 2 07:47:06.319775 systemd[1]: Starting issuegen.service... Jul 2 07:47:06.326475 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 07:47:06.326696 systemd[1]: Finished issuegen.service. Jul 2 07:47:06.329299 systemd[1]: Starting systemd-user-sessions.service... Jul 2 07:47:06.337557 systemd[1]: Finished systemd-user-sessions.service. Jul 2 07:47:06.340430 systemd[1]: Started getty@tty1.service. Jul 2 07:47:06.343404 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 07:47:06.344778 systemd[1]: Reached target getty.target. Jul 2 07:47:06.345928 systemd[1]: Reached target multi-user.target. Jul 2 07:47:06.349609 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 07:47:06.365726 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 07:47:06.365910 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 07:47:06.367235 systemd[1]: Startup finished in 699ms (kernel) + 7.299s (initrd) + 12.707s (userspace) = 20.706s. Jul 2 07:47:10.269483 systemd[1]: Created slice system-sshd.slice. Jul 2 07:47:10.272660 systemd[1]: Started sshd@0-172.31.20.37:22-139.178.89.65:41326.service. Jul 2 07:47:10.513138 sshd[1931]: Accepted publickey for core from 139.178.89.65 port 41326 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:10.523300 sshd[1931]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:10.568362 systemd[1]: Created slice user-500.slice. Jul 2 07:47:10.573553 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 07:47:10.580428 systemd-logind[1720]: New session 1 of user core. Jul 2 07:47:10.590101 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 07:47:10.592640 systemd[1]: Starting user@500.service... Jul 2 07:47:10.602046 (systemd)[1934]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:10.753896 systemd[1934]: Queued start job for default target default.target. Jul 2 07:47:10.755046 systemd[1934]: Reached target paths.target. Jul 2 07:47:10.755080 systemd[1934]: Reached target sockets.target. Jul 2 07:47:10.755098 systemd[1934]: Reached target timers.target. Jul 2 07:47:10.755119 systemd[1934]: Reached target basic.target. Jul 2 07:47:10.755243 systemd[1]: Started user@500.service. Jul 2 07:47:10.756881 systemd[1]: Started session-1.scope. Jul 2 07:47:10.759099 systemd[1934]: Reached target default.target. Jul 2 07:47:10.759318 systemd[1934]: Startup finished in 144ms. Jul 2 07:47:10.850404 amazon-ssm-agent[1708]: 2024-07-02 07:47:10 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Jul 2 07:47:10.921503 systemd[1]: Started sshd@1-172.31.20.37:22-139.178.89.65:41342.service. Jul 2 07:47:11.087248 sshd[1943]: Accepted publickey for core from 139.178.89.65 port 41342 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:11.088763 sshd[1943]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:11.092921 systemd-logind[1720]: New session 2 of user core. Jul 2 07:47:11.094434 systemd[1]: Started session-2.scope. Jul 2 07:47:11.223909 sshd[1943]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:11.227466 systemd[1]: sshd@1-172.31.20.37:22-139.178.89.65:41342.service: Deactivated successfully. Jul 2 07:47:11.228358 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 07:47:11.229042 systemd-logind[1720]: Session 2 logged out. Waiting for processes to exit. Jul 2 07:47:11.230074 systemd-logind[1720]: Removed session 2. Jul 2 07:47:11.250034 systemd[1]: Started sshd@2-172.31.20.37:22-139.178.89.65:41352.service. Jul 2 07:47:11.416612 sshd[1949]: Accepted publickey for core from 139.178.89.65 port 41352 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:11.418057 sshd[1949]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:11.424251 systemd[1]: Started session-3.scope. Jul 2 07:47:11.425231 systemd-logind[1720]: New session 3 of user core. Jul 2 07:47:11.547712 sshd[1949]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:11.551305 systemd[1]: sshd@2-172.31.20.37:22-139.178.89.65:41352.service: Deactivated successfully. Jul 2 07:47:11.552193 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 07:47:11.553033 systemd-logind[1720]: Session 3 logged out. Waiting for processes to exit. Jul 2 07:47:11.553984 systemd-logind[1720]: Removed session 3. Jul 2 07:47:11.573947 systemd[1]: Started sshd@3-172.31.20.37:22-139.178.89.65:41366.service. Jul 2 07:47:11.738294 sshd[1955]: Accepted publickey for core from 139.178.89.65 port 41366 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:11.739836 sshd[1955]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:11.745142 systemd[1]: Started session-4.scope. Jul 2 07:47:11.745836 systemd-logind[1720]: New session 4 of user core. Jul 2 07:47:11.874770 sshd[1955]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:11.878507 systemd[1]: sshd@3-172.31.20.37:22-139.178.89.65:41366.service: Deactivated successfully. Jul 2 07:47:11.879503 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 07:47:11.880186 systemd-logind[1720]: Session 4 logged out. Waiting for processes to exit. Jul 2 07:47:11.881121 systemd-logind[1720]: Removed session 4. Jul 2 07:47:11.899800 systemd[1]: Started sshd@4-172.31.20.37:22-139.178.89.65:41382.service. Jul 2 07:47:12.058885 sshd[1961]: Accepted publickey for core from 139.178.89.65 port 41382 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:12.060607 sshd[1961]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:12.066027 systemd[1]: Started session-5.scope. Jul 2 07:47:12.066839 systemd-logind[1720]: New session 5 of user core. Jul 2 07:47:12.196842 sudo[1964]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 07:47:12.197587 sudo[1964]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:47:12.210894 dbus-daemon[1711]: \xd0\u001d\xdd\xfe\xa6U: received setenforce notice (enforcing=-412849360) Jul 2 07:47:12.214658 sudo[1964]: pam_unix(sudo:session): session closed for user root Jul 2 07:47:12.238762 sshd[1961]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:12.242636 systemd[1]: sshd@4-172.31.20.37:22-139.178.89.65:41382.service: Deactivated successfully. Jul 2 07:47:12.253833 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 07:47:12.255384 systemd-logind[1720]: Session 5 logged out. Waiting for processes to exit. Jul 2 07:47:12.258200 systemd-logind[1720]: Removed session 5. Jul 2 07:47:12.264931 systemd[1]: Started sshd@5-172.31.20.37:22-139.178.89.65:41398.service. Jul 2 07:47:12.433026 sshd[1968]: Accepted publickey for core from 139.178.89.65 port 41398 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:12.434626 sshd[1968]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:12.441925 systemd-logind[1720]: New session 6 of user core. Jul 2 07:47:12.443026 systemd[1]: Started session-6.scope. Jul 2 07:47:12.546224 sudo[1972]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 07:47:12.547074 sudo[1972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:47:12.557716 sudo[1972]: pam_unix(sudo:session): session closed for user root Jul 2 07:47:12.572029 sudo[1971]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 07:47:12.572499 sudo[1971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:47:12.593679 systemd[1]: Stopping audit-rules.service... Jul 2 07:47:12.595000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:47:12.597941 kernel: kauditd_printk_skb: 225 callbacks suppressed Jul 2 07:47:12.597999 kernel: audit: type=1305 audit(1719906432.595:208): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:47:12.595000 audit[1975]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe94563070 a2=420 a3=0 items=0 ppid=1 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:12.608078 kernel: audit: type=1300 audit(1719906432.595:208): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe94563070 a2=420 a3=0 items=0 ppid=1 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:12.608229 kernel: audit: type=1327 audit(1719906432.595:208): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:47:12.595000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:47:12.608311 auditctl[1975]: No rules Jul 2 07:47:12.616284 kernel: audit: type=1131 audit(1719906432.607:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.609264 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 07:47:12.609512 systemd[1]: Stopped audit-rules.service. Jul 2 07:47:12.613700 systemd[1]: Starting audit-rules.service... Jul 2 07:47:12.638906 augenrules[1992]: No rules Jul 2 07:47:12.639645 systemd[1]: Finished audit-rules.service. Jul 2 07:47:12.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.644814 sudo[1971]: pam_unix(sudo:session): session closed for user root Jul 2 07:47:12.645389 kernel: audit: type=1130 audit(1719906432.638:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.643000 audit[1971]: USER_END pid=1971 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.650379 kernel: audit: type=1106 audit(1719906432.643:211): pid=1971 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.650491 kernel: audit: type=1104 audit(1719906432.643:212): pid=1971 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.643000 audit[1971]: CRED_DISP pid=1971 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.667711 sshd[1968]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:12.668000 audit[1968]: USER_END pid=1968 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.678681 systemd[1]: sshd@5-172.31.20.37:22-139.178.89.65:41398.service: Deactivated successfully. Jul 2 07:47:12.679630 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 07:47:12.688508 kernel: audit: type=1106 audit(1719906432.668:213): pid=1968 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.688644 kernel: audit: type=1104 audit(1719906432.668:214): pid=1968 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.668000 audit[1968]: CRED_DISP pid=1968 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.684083 systemd-logind[1720]: Session 6 logged out. Waiting for processes to exit. Jul 2 07:47:12.692021 systemd-logind[1720]: Removed session 6. Jul 2 07:47:12.697815 kernel: audit: type=1131 audit(1719906432.677:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.37:22-139.178.89.65:41398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.20.37:22-139.178.89.65:41398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.705766 systemd[1]: Started sshd@6-172.31.20.37:22-139.178.89.65:41400.service. Jul 2 07:47:12.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.37:22-139.178.89.65:41400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.869000 audit[1998]: USER_ACCT pid=1998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.870000 audit[1998]: CRED_ACQ pid=1998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.870000 audit[1998]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe75d54e50 a2=3 a3=0 items=0 ppid=1 pid=1998 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:12.870000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:47:12.872931 sshd[1998]: Accepted publickey for core from 139.178.89.65 port 41400 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:47:12.872799 sshd[1998]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:12.882654 systemd-logind[1720]: New session 7 of user core. Jul 2 07:47:12.883105 systemd[1]: Started session-7.scope. Jul 2 07:47:12.888000 audit[1998]: USER_START pid=1998 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.890000 audit[2001]: CRED_ACQ pid=2001 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:12.982000 audit[2002]: USER_ACCT pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.984005 sudo[2002]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 07:47:12.982000 audit[2002]: CRED_REFR pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:12.984350 sudo[2002]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:47:12.993000 audit[2002]: USER_START pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:13.042545 systemd[1]: Starting docker.service... Jul 2 07:47:13.096508 env[2012]: time="2024-07-02T07:47:13.096455941Z" level=info msg="Starting up" Jul 2 07:47:13.098111 env[2012]: time="2024-07-02T07:47:13.098078639Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:47:13.098227 env[2012]: time="2024-07-02T07:47:13.098213706Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:47:13.098299 env[2012]: time="2024-07-02T07:47:13.098285943Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:47:13.098451 env[2012]: time="2024-07-02T07:47:13.098400093Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:47:13.100846 env[2012]: time="2024-07-02T07:47:13.100810724Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:47:13.100846 env[2012]: time="2024-07-02T07:47:13.100831980Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:47:13.101002 env[2012]: time="2024-07-02T07:47:13.100852235Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:47:13.101002 env[2012]: time="2024-07-02T07:47:13.100865317Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:47:13.497538 env[2012]: time="2024-07-02T07:47:13.497401104Z" level=info msg="Loading containers: start." Jul 2 07:47:13.611000 audit[2042]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.611000 audit[2042]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffeca7934f0 a2=0 a3=7ffeca7934dc items=0 ppid=2012 pid=2042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.611000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 07:47:13.613000 audit[2044]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.613000 audit[2044]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff156fdf00 a2=0 a3=7fff156fdeec items=0 ppid=2012 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.613000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 07:47:13.615000 audit[2046]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.615000 audit[2046]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffda035ae10 a2=0 a3=7ffda035adfc items=0 ppid=2012 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.615000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:47:13.620000 audit[2048]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.620000 audit[2048]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc121ca0b0 a2=0 a3=7ffc121ca09c items=0 ppid=2012 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.620000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:47:13.623000 audit[2050]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.623000 audit[2050]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc35285150 a2=0 a3=7ffc3528513c items=0 ppid=2012 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 07:47:13.653000 audit[2055]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.653000 audit[2055]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffed92f57c0 a2=0 a3=7ffed92f57ac items=0 ppid=2012 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.653000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 07:47:13.665000 audit[2057]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.665000 audit[2057]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcda57cc00 a2=0 a3=7ffcda57cbec items=0 ppid=2012 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.665000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 07:47:13.667000 audit[2059]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.667000 audit[2059]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd2686c030 a2=0 a3=7ffd2686c01c items=0 ppid=2012 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 07:47:13.670000 audit[2061]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.670000 audit[2061]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd15601880 a2=0 a3=7ffd1560186c items=0 ppid=2012 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.670000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:47:13.685000 audit[2065]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.685000 audit[2065]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffd54bf530 a2=0 a3=7fffd54bf51c items=0 ppid=2012 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:47:13.687000 audit[2066]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.687000 audit[2066]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff900626f0 a2=0 a3=7fff900626dc items=0 ppid=2012 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.687000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:47:13.712355 kernel: Initializing XFRM netlink socket Jul 2 07:47:13.772249 env[2012]: time="2024-07-02T07:47:13.770492483Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 07:47:13.773620 (udev-worker)[2022]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:47:13.833000 audit[2074]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.833000 audit[2074]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe87400450 a2=0 a3=7ffe8740043c items=0 ppid=2012 pid=2074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.833000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 07:47:13.963000 audit[2077]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.963000 audit[2077]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc6b3f9f40 a2=0 a3=7ffc6b3f9f2c items=0 ppid=2012 pid=2077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.963000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 07:47:13.967000 audit[2080]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.967000 audit[2080]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd95a18d00 a2=0 a3=7ffd95a18cec items=0 ppid=2012 pid=2080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 07:47:13.970000 audit[2082]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.970000 audit[2082]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffff7062560 a2=0 a3=7ffff706254c items=0 ppid=2012 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.970000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 07:47:13.973000 audit[2084]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.973000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc18d25c50 a2=0 a3=7ffc18d25c3c items=0 ppid=2012 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.973000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 07:47:13.976000 audit[2086]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.976000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd20b632d0 a2=0 a3=7ffd20b632bc items=0 ppid=2012 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.976000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 07:47:13.978000 audit[2088]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.978000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcf11f86b0 a2=0 a3=7ffcf11f869c items=0 ppid=2012 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 07:47:13.989000 audit[2091]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.989000 audit[2091]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc2c1bdbd0 a2=0 a3=7ffc2c1bdbbc items=0 ppid=2012 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 07:47:13.993000 audit[2093]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.993000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff94f29040 a2=0 a3=7fff94f2902c items=0 ppid=2012 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.993000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:47:13.996000 audit[2095]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.996000 audit[2095]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc075103c0 a2=0 a3=7ffc075103ac items=0 ppid=2012 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.996000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:47:13.999000 audit[2097]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:13.999000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffedf8673d0 a2=0 a3=7ffedf8673bc items=0 ppid=2012 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:13.999000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 07:47:14.001417 systemd-networkd[1457]: docker0: Link UP Jul 2 07:47:14.013000 audit[2101]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2101 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.013000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd2f636bf0 a2=0 a3=7ffd2f636bdc items=0 ppid=2012 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.013000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:47:14.014000 audit[2102]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.014000 audit[2102]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc554d0150 a2=0 a3=7ffc554d013c items=0 ppid=2012 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.014000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:47:14.016379 env[2012]: time="2024-07-02T07:47:14.016337915Z" level=info msg="Loading containers: done." Jul 2 07:47:14.043722 env[2012]: time="2024-07-02T07:47:14.042988957Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 07:47:14.043722 env[2012]: time="2024-07-02T07:47:14.043219496Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 07:47:14.043722 env[2012]: time="2024-07-02T07:47:14.043453442Z" level=info msg="Daemon has completed initialization" Jul 2 07:47:14.072910 systemd[1]: Started docker.service. Jul 2 07:47:14.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:14.085041 env[2012]: time="2024-07-02T07:47:14.084975300Z" level=info msg="API listen on /run/docker.sock" Jul 2 07:47:15.272515 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 07:47:15.272814 systemd[1]: Stopped kubelet.service. Jul 2 07:47:15.272880 systemd[1]: kubelet.service: Consumed 1.278s CPU time. Jul 2 07:47:15.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:15.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:15.275068 systemd[1]: Starting kubelet.service... Jul 2 07:47:15.800007 env[1727]: time="2024-07-02T07:47:15.799658005Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\"" Jul 2 07:47:15.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:16.000110 systemd[1]: Started kubelet.service. Jul 2 07:47:16.068970 kubelet[2144]: E0702 07:47:16.068792 2144 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:47:16.072953 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:47:16.073124 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:47:16.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:16.480352 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3836790358.mount: Deactivated successfully. Jul 2 07:47:19.421586 env[1727]: time="2024-07-02T07:47:19.421529083Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:19.424786 env[1727]: time="2024-07-02T07:47:19.424738625Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3af2ab51e136465590d968a2052e02e180fc7967a03724b269c1337e8f09d36f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:19.427456 env[1727]: time="2024-07-02T07:47:19.427414045Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:19.430152 env[1727]: time="2024-07-02T07:47:19.430093124Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:f4d993b3d73cc0d59558be584b5b40785b4a96874bc76873b69d1dd818485e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:19.430885 env[1727]: time="2024-07-02T07:47:19.430845231Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\" returns image reference \"sha256:3af2ab51e136465590d968a2052e02e180fc7967a03724b269c1337e8f09d36f\"" Jul 2 07:47:19.442512 env[1727]: time="2024-07-02T07:47:19.442465752Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\"" Jul 2 07:47:22.892046 env[1727]: time="2024-07-02T07:47:22.891912421Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:22.896048 env[1727]: time="2024-07-02T07:47:22.895955039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:083b81fc09e858d3e0d4b42f567a9d44a2232b60bac396a94cbdd7ce1098235e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:22.899314 env[1727]: time="2024-07-02T07:47:22.899267590Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:22.902500 env[1727]: time="2024-07-02T07:47:22.902456433Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:692fc3f88a60b3afc76492ad347306d34042000f56f230959e9367fd59c48b1e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:22.903933 env[1727]: time="2024-07-02T07:47:22.903887873Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\" returns image reference \"sha256:083b81fc09e858d3e0d4b42f567a9d44a2232b60bac396a94cbdd7ce1098235e\"" Jul 2 07:47:22.920450 env[1727]: time="2024-07-02T07:47:22.920414483Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\"" Jul 2 07:47:24.552961 env[1727]: time="2024-07-02T07:47:24.552907104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:24.555814 env[1727]: time="2024-07-02T07:47:24.555767978Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:49d9b8328a8fda6ebca6b3226c6d722d92ec7adffff18668511a88058444cf15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:24.558234 env[1727]: time="2024-07-02T07:47:24.558184146Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:24.561167 env[1727]: time="2024-07-02T07:47:24.561110738Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:b91a4e45debd0d5336d9f533aefdf47d4b39b24071feb459e521709b9e4ec24f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:24.561943 env[1727]: time="2024-07-02T07:47:24.561901283Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\" returns image reference \"sha256:49d9b8328a8fda6ebca6b3226c6d722d92ec7adffff18668511a88058444cf15\"" Jul 2 07:47:24.575748 env[1727]: time="2024-07-02T07:47:24.575706138Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\"" Jul 2 07:47:25.882054 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1279423216.mount: Deactivated successfully. Jul 2 07:47:26.224730 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 07:47:26.224861 kernel: audit: type=1130 audit(1719906446.221:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:26.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:26.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:26.222217 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 07:47:26.222497 systemd[1]: Stopped kubelet.service. Jul 2 07:47:26.224475 systemd[1]: Starting kubelet.service... Jul 2 07:47:26.231287 kernel: audit: type=1131 audit(1719906446.221:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:26.663252 env[1727]: time="2024-07-02T07:47:26.662483960Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:26.683211 env[1727]: time="2024-07-02T07:47:26.683156485Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c49592198fa15b509fe4ee4a538067866776e325d6dd33c77ad6647e1d3aac9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:26.694586 env[1727]: time="2024-07-02T07:47:26.694503305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:26.704143 env[1727]: time="2024-07-02T07:47:26.703461092Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:88bacb3e1d6c0c37c6da95c6d6b8e30531d0b4d0ab540cc290b0af51fbfebd90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:26.704143 env[1727]: time="2024-07-02T07:47:26.703784235Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\" returns image reference \"sha256:9c49592198fa15b509fe4ee4a538067866776e325d6dd33c77ad6647e1d3aac9\"" Jul 2 07:47:26.718034 kernel: audit: type=1130 audit(1719906446.709:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:26.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:26.710080 systemd[1]: Started kubelet.service. Jul 2 07:47:26.729523 env[1727]: time="2024-07-02T07:47:26.729478854Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Jul 2 07:47:26.794292 kubelet[2173]: E0702 07:47:26.794224 2173 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:47:26.797081 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:47:26.797253 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:47:26.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:26.801497 kernel: audit: type=1131 audit(1719906446.796:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:27.298280 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount143848567.mount: Deactivated successfully. Jul 2 07:47:28.649988 env[1727]: time="2024-07-02T07:47:28.649932511Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:28.652976 env[1727]: time="2024-07-02T07:47:28.652919816Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:28.655752 env[1727]: time="2024-07-02T07:47:28.655707140Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:28.661151 env[1727]: time="2024-07-02T07:47:28.661105225Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:28.661823 env[1727]: time="2024-07-02T07:47:28.661779795Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Jul 2 07:47:28.674782 env[1727]: time="2024-07-02T07:47:28.674735233Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 07:47:29.158284 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2022978907.mount: Deactivated successfully. Jul 2 07:47:29.168450 env[1727]: time="2024-07-02T07:47:29.168395081Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:29.172009 env[1727]: time="2024-07-02T07:47:29.171958695Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:29.174523 env[1727]: time="2024-07-02T07:47:29.174482188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:29.176896 env[1727]: time="2024-07-02T07:47:29.176854634Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:29.177377 env[1727]: time="2024-07-02T07:47:29.177324812Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Jul 2 07:47:29.190256 env[1727]: time="2024-07-02T07:47:29.189842909Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Jul 2 07:47:29.713849 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3980673440.mount: Deactivated successfully. Jul 2 07:47:32.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:32.619165 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jul 2 07:47:32.624688 kernel: audit: type=1131 audit(1719906452.618:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:32.650563 kernel: audit: type=1334 audit(1719906452.644:259): prog-id=43 op=UNLOAD Jul 2 07:47:32.650697 kernel: audit: type=1334 audit(1719906452.644:260): prog-id=42 op=UNLOAD Jul 2 07:47:32.650732 kernel: audit: type=1334 audit(1719906452.644:261): prog-id=41 op=UNLOAD Jul 2 07:47:32.644000 audit: BPF prog-id=43 op=UNLOAD Jul 2 07:47:32.644000 audit: BPF prog-id=42 op=UNLOAD Jul 2 07:47:32.644000 audit: BPF prog-id=41 op=UNLOAD Jul 2 07:47:34.302856 env[1727]: time="2024-07-02T07:47:34.302711512Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:34.306708 env[1727]: time="2024-07-02T07:47:34.306661365Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:34.320255 env[1727]: time="2024-07-02T07:47:34.320198360Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:34.321411 env[1727]: time="2024-07-02T07:47:34.321371099Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:34.322230 env[1727]: time="2024-07-02T07:47:34.322189585Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7\"" Jul 2 07:47:36.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:36.980726 kernel: audit: type=1130 audit(1719906456.971:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:36.972378 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 2 07:47:36.972714 systemd[1]: Stopped kubelet.service. Jul 2 07:47:36.983657 systemd[1]: Starting kubelet.service... Jul 2 07:47:36.971000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:36.994395 kernel: audit: type=1131 audit(1719906456.971:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:37.819311 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 2 07:47:37.819420 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 2 07:47:37.819724 systemd[1]: Stopped kubelet.service. Jul 2 07:47:37.826359 kernel: audit: type=1130 audit(1719906457.818:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:37.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:37.825633 systemd[1]: Starting kubelet.service... Jul 2 07:47:37.859206 systemd[1]: Reloading. Jul 2 07:47:38.020052 /usr/lib/systemd/system-generators/torcx-generator[2284]: time="2024-07-02T07:47:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:47:38.021439 /usr/lib/systemd/system-generators/torcx-generator[2284]: time="2024-07-02T07:47:38Z" level=info msg="torcx already run" Jul 2 07:47:38.169849 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:47:38.169874 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:47:38.232120 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:47:38.342873 kernel: audit: type=1400 audit(1719906458.327:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.343061 kernel: audit: type=1400 audit(1719906458.327:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.343111 kernel: audit: type=1400 audit(1719906458.327:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.343149 kernel: audit: type=1400 audit(1719906458.327:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.352860 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 07:47:38.353001 kernel: audit: type=1400 audit(1719906458.327:269): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.353035 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357140 kernel: audit: type=1400 audit(1719906458.327:270): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357275 kernel: audit: backlog limit exceeded Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.334000 audit: BPF prog-id=46 op=LOAD Jul 2 07:47:38.334000 audit: BPF prog-id=36 op=UNLOAD Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.337000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.337000 audit: BPF prog-id=47 op=LOAD Jul 2 07:47:38.337000 audit: BPF prog-id=44 op=UNLOAD Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit: BPF prog-id=48 op=LOAD Jul 2 07:47:38.341000 audit: BPF prog-id=27 op=UNLOAD Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit: BPF prog-id=49 op=LOAD Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.341000 audit: BPF prog-id=50 op=LOAD Jul 2 07:47:38.341000 audit: BPF prog-id=28 op=UNLOAD Jul 2 07:47:38.341000 audit: BPF prog-id=29 op=UNLOAD Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.345000 audit: BPF prog-id=51 op=LOAD Jul 2 07:47:38.345000 audit: BPF prog-id=30 op=UNLOAD Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit: BPF prog-id=52 op=LOAD Jul 2 07:47:38.357000 audit: BPF prog-id=38 op=UNLOAD Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit: BPF prog-id=53 op=LOAD Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.357000 audit: BPF prog-id=39 op=UNLOAD Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.360000 audit: BPF prog-id=55 op=LOAD Jul 2 07:47:38.360000 audit: BPF prog-id=37 op=UNLOAD Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit: BPF prog-id=56 op=LOAD Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.361000 audit: BPF prog-id=57 op=LOAD Jul 2 07:47:38.361000 audit: BPF prog-id=31 op=UNLOAD Jul 2 07:47:38.361000 audit: BPF prog-id=32 op=UNLOAD Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit: BPF prog-id=58 op=LOAD Jul 2 07:47:38.365000 audit: BPF prog-id=33 op=UNLOAD Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit: BPF prog-id=59 op=LOAD Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:38.365000 audit: BPF prog-id=60 op=LOAD Jul 2 07:47:38.365000 audit: BPF prog-id=34 op=UNLOAD Jul 2 07:47:38.365000 audit: BPF prog-id=35 op=UNLOAD Jul 2 07:47:38.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:38.390085 systemd[1]: Started kubelet.service. Jul 2 07:47:38.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:38.397399 systemd[1]: Stopping kubelet.service... Jul 2 07:47:38.397861 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:47:38.398045 systemd[1]: Stopped kubelet.service. Jul 2 07:47:38.401206 systemd[1]: Starting kubelet.service... Jul 2 07:47:38.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:38.744423 systemd[1]: Started kubelet.service. Jul 2 07:47:38.819271 kubelet[2344]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:38.819657 kubelet[2344]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:47:38.819710 kubelet[2344]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:38.822956 kubelet[2344]: I0702 07:47:38.822840 2344 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:47:39.317879 kubelet[2344]: I0702 07:47:39.317830 2344 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 07:47:39.317879 kubelet[2344]: I0702 07:47:39.317870 2344 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:47:39.318166 kubelet[2344]: I0702 07:47:39.318155 2344 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 07:47:39.355344 kubelet[2344]: E0702 07:47:39.355299 2344 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.20.37:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.357820 kubelet[2344]: I0702 07:47:39.357786 2344 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:47:39.369930 kubelet[2344]: I0702 07:47:39.369894 2344 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:47:39.372086 kubelet[2344]: I0702 07:47:39.372044 2344 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:47:39.372801 kubelet[2344]: I0702 07:47:39.372762 2344 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:47:39.373564 kubelet[2344]: I0702 07:47:39.373537 2344 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:47:39.373751 kubelet[2344]: I0702 07:47:39.373569 2344 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:47:39.373818 kubelet[2344]: I0702 07:47:39.373799 2344 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:39.374208 kubelet[2344]: I0702 07:47:39.374158 2344 kubelet.go:396] "Attempting to sync node with API server" Jul 2 07:47:39.374308 kubelet[2344]: I0702 07:47:39.374224 2344 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:47:39.374308 kubelet[2344]: I0702 07:47:39.374294 2344 kubelet.go:312] "Adding apiserver pod source" Jul 2 07:47:39.374479 kubelet[2344]: I0702 07:47:39.374319 2344 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:47:39.375145 kubelet[2344]: W0702 07:47:39.375058 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://172.31.20.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-37&limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.375420 kubelet[2344]: E0702 07:47:39.375405 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.20.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-37&limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.377017 kubelet[2344]: I0702 07:47:39.376997 2344 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:47:39.387176 kubelet[2344]: W0702 07:47:39.387114 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://172.31.20.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.387176 kubelet[2344]: E0702 07:47:39.387177 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.20.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.388666 kubelet[2344]: I0702 07:47:39.388623 2344 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 07:47:39.394121 kubelet[2344]: W0702 07:47:39.394079 2344 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 07:47:39.394872 kubelet[2344]: I0702 07:47:39.394838 2344 server.go:1256] "Started kubelet" Jul 2 07:47:39.395080 kubelet[2344]: I0702 07:47:39.395052 2344 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:47:39.396158 kubelet[2344]: I0702 07:47:39.396133 2344 server.go:461] "Adding debug handlers to kubelet server" Jul 2 07:47:39.396540 kubelet[2344]: I0702 07:47:39.396503 2344 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 07:47:39.397011 kubelet[2344]: I0702 07:47:39.396994 2344 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:47:39.396000 audit[2344]: AVC avc: denied { mac_admin } for pid=2344 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.396000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:39.396000 audit[2344]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a64b70 a1=c0009c6d80 a2=c000a64b40 a3=25 items=0 ppid=1 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.396000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:39.396000 audit[2344]: AVC avc: denied { mac_admin } for pid=2344 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.396000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:39.396000 audit[2344]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009ecb60 a1=c0009c6d98 a2=c000a64c00 a3=25 items=0 ppid=1 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.396000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:39.398819 kubelet[2344]: I0702 07:47:39.398138 2344 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:47:39.398819 kubelet[2344]: I0702 07:47:39.398188 2344 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:47:39.398819 kubelet[2344]: I0702 07:47:39.398267 2344 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:47:39.401000 audit[2354]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.401000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe424a4c70 a2=0 a3=7ffe424a4c5c items=0 ppid=2344 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.401000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:47:39.404000 audit[2355]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.404000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf8c0d8d0 a2=0 a3=7ffdf8c0d8bc items=0 ppid=2344 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:47:39.408765 kubelet[2344]: E0702 07:47:39.408736 2344 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.20.37:6443/api/v1/namespaces/default/events\": dial tcp 172.31.20.37:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-20-37.17de55cff720a18b default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-20-37,UID:ip-172-31-20-37,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-20-37,},FirstTimestamp:2024-07-02 07:47:39.394810251 +0000 UTC m=+0.643551086,LastTimestamp:2024-07-02 07:47:39.394810251 +0000 UTC m=+0.643551086,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-20-37,}" Jul 2 07:47:39.410993 kubelet[2344]: I0702 07:47:39.410959 2344 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:47:39.412000 audit[2357]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.412000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcfd45d8e0 a2=0 a3=7ffcfd45d8cc items=0 ppid=2344 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:47:39.414416 kubelet[2344]: E0702 07:47:39.414394 2344 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-37?timeout=10s\": dial tcp 172.31.20.37:6443: connect: connection refused" interval="200ms" Jul 2 07:47:39.416258 kubelet[2344]: I0702 07:47:39.415974 2344 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 07:47:39.416258 kubelet[2344]: I0702 07:47:39.416049 2344 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 07:47:39.417038 kubelet[2344]: I0702 07:47:39.417022 2344 factory.go:221] Registration of the containerd container factory successfully Jul 2 07:47:39.417150 kubelet[2344]: I0702 07:47:39.417140 2344 factory.go:221] Registration of the systemd container factory successfully Jul 2 07:47:39.417318 kubelet[2344]: I0702 07:47:39.417299 2344 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 07:47:39.416000 audit[2359]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.416000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd955f42e0 a2=0 a3=7ffd955f42cc items=0 ppid=2344 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.416000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:47:39.423870 kubelet[2344]: W0702 07:47:39.423192 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://172.31.20.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.423870 kubelet[2344]: E0702 07:47:39.423261 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.20.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.431894 kubelet[2344]: E0702 07:47:39.431865 2344 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:47:39.443000 audit[2364]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.443000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe31381810 a2=0 a3=7ffe313817fc items=0 ppid=2344 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 07:47:39.445216 kubelet[2344]: I0702 07:47:39.445179 2344 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:47:39.445000 audit[2365]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:39.445000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff5000fa60 a2=0 a3=7fff5000fa4c items=0 ppid=2344 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.445000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:47:39.447021 kubelet[2344]: I0702 07:47:39.446732 2344 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:47:39.447021 kubelet[2344]: I0702 07:47:39.446761 2344 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:47:39.447021 kubelet[2344]: I0702 07:47:39.446785 2344 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 07:47:39.447021 kubelet[2344]: E0702 07:47:39.446840 2344 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:47:39.448000 audit[2366]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.448000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff5692d640 a2=0 a3=7fff5692d62c items=0 ppid=2344 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.448000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:47:39.449000 audit[2367]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:39.449000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5e054890 a2=0 a3=7ffe5e05487c items=0 ppid=2344 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.449000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:47:39.451000 audit[2368]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.451000 audit[2369]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:39.451000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffd0412c050 a2=0 a3=10e3 items=0 ppid=2344 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.451000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:47:39.451000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb9333eb0 a2=0 a3=7ffdb9333e9c items=0 ppid=2344 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.451000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:47:39.453000 audit[2370]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:39.453000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd9bcd27a0 a2=0 a3=7ffd9bcd278c items=0 ppid=2344 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.453000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:47:39.454000 audit[2371]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:39.454000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc9b8d43d0 a2=0 a3=7ffc9b8d43bc items=0 ppid=2344 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:47:39.457239 kubelet[2344]: W0702 07:47:39.457187 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://172.31.20.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.457598 kubelet[2344]: I0702 07:47:39.457277 2344 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:47:39.457670 kubelet[2344]: I0702 07:47:39.457607 2344 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:47:39.457670 kubelet[2344]: I0702 07:47:39.457629 2344 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:39.457773 kubelet[2344]: E0702 07:47:39.457592 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.20.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:39.460299 kubelet[2344]: I0702 07:47:39.460263 2344 policy_none.go:49] "None policy: Start" Jul 2 07:47:39.461208 kubelet[2344]: I0702 07:47:39.461161 2344 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 07:47:39.461208 kubelet[2344]: I0702 07:47:39.461210 2344 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:47:39.469170 systemd[1]: Created slice kubepods.slice. Jul 2 07:47:39.476310 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 07:47:39.480556 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 07:47:39.488470 kubelet[2344]: I0702 07:47:39.488440 2344 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:47:39.487000 audit[2344]: AVC avc: denied { mac_admin } for pid=2344 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.487000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:39.487000 audit[2344]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ad17d0 a1=c00097c840 a2=c000ad17a0 a3=25 items=0 ppid=1 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.487000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:39.488919 kubelet[2344]: I0702 07:47:39.488539 2344 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:47:39.488919 kubelet[2344]: I0702 07:47:39.488756 2344 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:47:39.492834 kubelet[2344]: E0702 07:47:39.492808 2344 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-20-37\" not found" Jul 2 07:47:39.513109 kubelet[2344]: I0702 07:47:39.513090 2344 kubelet_node_status.go:73] "Attempting to register node" node="ip-172-31-20-37" Jul 2 07:47:39.513862 kubelet[2344]: E0702 07:47:39.513844 2344 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.31.20.37:6443/api/v1/nodes\": dial tcp 172.31.20.37:6443: connect: connection refused" node="ip-172-31-20-37" Jul 2 07:47:39.547592 kubelet[2344]: I0702 07:47:39.547561 2344 topology_manager.go:215] "Topology Admit Handler" podUID="6f20d3b1d534ab5498fe00a60f6a58a5" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-20-37" Jul 2 07:47:39.549827 kubelet[2344]: I0702 07:47:39.549789 2344 topology_manager.go:215] "Topology Admit Handler" podUID="d910a0da433ab948eea6d40cd6d86246" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:39.551375 kubelet[2344]: I0702 07:47:39.551354 2344 topology_manager.go:215] "Topology Admit Handler" podUID="902915cf8ab494cfd0f76dd7255a99af" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-20-37" Jul 2 07:47:39.558566 systemd[1]: Created slice kubepods-burstable-pod6f20d3b1d534ab5498fe00a60f6a58a5.slice. Jul 2 07:47:39.577636 systemd[1]: Created slice kubepods-burstable-pod902915cf8ab494cfd0f76dd7255a99af.slice. Jul 2 07:47:39.591670 systemd[1]: Created slice kubepods-burstable-podd910a0da433ab948eea6d40cd6d86246.slice. Jul 2 07:47:39.615567 kubelet[2344]: E0702 07:47:39.615515 2344 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-37?timeout=10s\": dial tcp 172.31.20.37:6443: connect: connection refused" interval="400ms" Jul 2 07:47:39.716941 kubelet[2344]: I0702 07:47:39.716905 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-ca-certs\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:39.717169 kubelet[2344]: I0702 07:47:39.716984 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-kubeconfig\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:39.717169 kubelet[2344]: I0702 07:47:39.717021 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6f20d3b1d534ab5498fe00a60f6a58a5-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-20-37\" (UID: \"6f20d3b1d534ab5498fe00a60f6a58a5\") " pod="kube-system/kube-apiserver-ip-172-31-20-37" Jul 2 07:47:39.717169 kubelet[2344]: I0702 07:47:39.717083 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/902915cf8ab494cfd0f76dd7255a99af-kubeconfig\") pod \"kube-scheduler-ip-172-31-20-37\" (UID: \"902915cf8ab494cfd0f76dd7255a99af\") " pod="kube-system/kube-scheduler-ip-172-31-20-37" Jul 2 07:47:39.717169 kubelet[2344]: I0702 07:47:39.717145 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6f20d3b1d534ab5498fe00a60f6a58a5-ca-certs\") pod \"kube-apiserver-ip-172-31-20-37\" (UID: \"6f20d3b1d534ab5498fe00a60f6a58a5\") " pod="kube-system/kube-apiserver-ip-172-31-20-37" Jul 2 07:47:39.717689 kubelet[2344]: I0702 07:47:39.717181 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6f20d3b1d534ab5498fe00a60f6a58a5-k8s-certs\") pod \"kube-apiserver-ip-172-31-20-37\" (UID: \"6f20d3b1d534ab5498fe00a60f6a58a5\") " pod="kube-system/kube-apiserver-ip-172-31-20-37" Jul 2 07:47:39.717689 kubelet[2344]: I0702 07:47:39.717318 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:39.717689 kubelet[2344]: I0702 07:47:39.717490 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-k8s-certs\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:39.717689 kubelet[2344]: I0702 07:47:39.717566 2344 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:39.717955 kubelet[2344]: I0702 07:47:39.717929 2344 kubelet_node_status.go:73] "Attempting to register node" node="ip-172-31-20-37" Jul 2 07:47:39.718785 kubelet[2344]: E0702 07:47:39.718734 2344 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.31.20.37:6443/api/v1/nodes\": dial tcp 172.31.20.37:6443: connect: connection refused" node="ip-172-31-20-37" Jul 2 07:47:39.875386 env[1727]: time="2024-07-02T07:47:39.875262318Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-20-37,Uid:6f20d3b1d534ab5498fe00a60f6a58a5,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:39.885081 env[1727]: time="2024-07-02T07:47:39.885026642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-20-37,Uid:902915cf8ab494cfd0f76dd7255a99af,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:39.896001 env[1727]: time="2024-07-02T07:47:39.895944908Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-20-37,Uid:d910a0da433ab948eea6d40cd6d86246,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:40.016597 kubelet[2344]: E0702 07:47:40.016559 2344 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-37?timeout=10s\": dial tcp 172.31.20.37:6443: connect: connection refused" interval="800ms" Jul 2 07:47:40.121094 kubelet[2344]: I0702 07:47:40.121064 2344 kubelet_node_status.go:73] "Attempting to register node" node="ip-172-31-20-37" Jul 2 07:47:40.121552 kubelet[2344]: E0702 07:47:40.121527 2344 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.31.20.37:6443/api/v1/nodes\": dial tcp 172.31.20.37:6443: connect: connection refused" node="ip-172-31-20-37" Jul 2 07:47:40.249616 kubelet[2344]: W0702 07:47:40.249531 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://172.31.20.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-37&limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.249616 kubelet[2344]: E0702 07:47:40.249597 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.20.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-20-37&limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.251060 kubelet[2344]: W0702 07:47:40.251002 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://172.31.20.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.251060 kubelet[2344]: E0702 07:47:40.251059 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.20.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.359910 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3195482059.mount: Deactivated successfully. Jul 2 07:47:40.374830 env[1727]: time="2024-07-02T07:47:40.374771042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.376730 env[1727]: time="2024-07-02T07:47:40.376688319Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.380772 env[1727]: time="2024-07-02T07:47:40.380724923Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.382912 env[1727]: time="2024-07-02T07:47:40.382869320Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.384787 env[1727]: time="2024-07-02T07:47:40.384742198Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.386641 env[1727]: time="2024-07-02T07:47:40.386601290Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.388551 env[1727]: time="2024-07-02T07:47:40.388495221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.389960 env[1727]: time="2024-07-02T07:47:40.389918970Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.391537 env[1727]: time="2024-07-02T07:47:40.391496557Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.392758 env[1727]: time="2024-07-02T07:47:40.392721077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.395178 env[1727]: time="2024-07-02T07:47:40.395134338Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.396459 env[1727]: time="2024-07-02T07:47:40.396421208Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:40.454979 env[1727]: time="2024-07-02T07:47:40.454813790Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:40.455360 env[1727]: time="2024-07-02T07:47:40.455306773Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:40.455593 env[1727]: time="2024-07-02T07:47:40.455550834Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:40.456270 env[1727]: time="2024-07-02T07:47:40.456161881Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3fbe46b73247bafd6440ed51521c43aa10058e13bedc1fa9692f2023c66cdad pid=2383 runtime=io.containerd.runc.v2 Jul 2 07:47:40.469905 env[1727]: time="2024-07-02T07:47:40.469811462Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:40.473227 env[1727]: time="2024-07-02T07:47:40.472706810Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:40.473227 env[1727]: time="2024-07-02T07:47:40.472740364Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:40.473227 env[1727]: time="2024-07-02T07:47:40.472956055Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3636723cd8f308ac69a7bef469d105571696f9d683fa7eb4e452e87b3bfe9a91 pid=2411 runtime=io.containerd.runc.v2 Jul 2 07:47:40.478910 env[1727]: time="2024-07-02T07:47:40.478612921Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:40.478910 env[1727]: time="2024-07-02T07:47:40.478678516Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:40.478910 env[1727]: time="2024-07-02T07:47:40.478694074Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:40.479192 env[1727]: time="2024-07-02T07:47:40.478970097Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e1b56a1828d1a805348cd663e6aceccc75d33e3e23fa770935e4e79d802b5fd2 pid=2407 runtime=io.containerd.runc.v2 Jul 2 07:47:40.503339 systemd[1]: Started cri-containerd-e1b56a1828d1a805348cd663e6aceccc75d33e3e23fa770935e4e79d802b5fd2.scope. Jul 2 07:47:40.512059 systemd[1]: Started cri-containerd-d3fbe46b73247bafd6440ed51521c43aa10058e13bedc1fa9692f2023c66cdad.scope. Jul 2 07:47:40.533124 systemd[1]: Started cri-containerd-3636723cd8f308ac69a7bef469d105571696f9d683fa7eb4e452e87b3bfe9a91.scope. Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.550000 audit: BPF prog-id=61 op=LOAD Jul 2 07:47:40.551000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.551000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2407 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.551000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536613138323864316138303533343863643636336536616365 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2407 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536613138323864316138303533343863643636336536616365 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.552000 audit: BPF prog-id=62 op=LOAD Jul 2 07:47:40.552000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000216350 items=0 ppid=2407 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.552000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536613138323864316138303533343863643636336536616365 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.553000 audit: BPF prog-id=63 op=LOAD Jul 2 07:47:40.553000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000216398 items=0 ppid=2407 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.553000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536613138323864316138303533343863643636336536616365 Jul 2 07:47:40.554000 audit: BPF prog-id=63 op=UNLOAD Jul 2 07:47:40.555000 audit: BPF prog-id=62 op=UNLOAD Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.555000 audit: BPF prog-id=64 op=LOAD Jul 2 07:47:40.555000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002167a8 items=0 ppid=2407 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.555000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531623536613138323864316138303533343863643636336536616365 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.572000 audit: BPF prog-id=65 op=LOAD Jul 2 07:47:40.573000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.573000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2411 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336333637323363643866333038616336396137626566343639643130 Jul 2 07:47:40.574000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.574000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2411 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336333637323363643866333038616336396137626566343639643130 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.575000 audit: BPF prog-id=66 op=LOAD Jul 2 07:47:40.575000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001fdd10 items=0 ppid=2411 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336333637323363643866333038616336396137626566343639643130 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.576000 audit: BPF prog-id=67 op=LOAD Jul 2 07:47:40.576000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001fdd58 items=0 ppid=2411 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336333637323363643866333038616336396137626566343639643130 Jul 2 07:47:40.577000 audit: BPF prog-id=67 op=UNLOAD Jul 2 07:47:40.577000 audit: BPF prog-id=66 op=UNLOAD Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { perfmon } for pid=2426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit[2426]: AVC avc: denied { bpf } for pid=2426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.577000 audit: BPF prog-id=68 op=LOAD Jul 2 07:47:40.577000 audit[2426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000376168 items=0 ppid=2411 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336333637323363643866333038616336396137626566343639643130 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.589000 audit: BPF prog-id=69 op=LOAD Jul 2 07:47:40.590000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.590000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2383 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666265343662373332343762616664363434306564353135323163 Jul 2 07:47:40.590000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.590000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2383 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666265343662373332343762616664363434306564353135323163 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.591000 audit: BPF prog-id=70 op=LOAD Jul 2 07:47:40.591000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025590 items=0 ppid=2383 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.591000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666265343662373332343762616664363434306564353135323163 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit: BPF prog-id=71 op=LOAD Jul 2 07:47:40.592000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000255d8 items=0 ppid=2383 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666265343662373332343762616664363434306564353135323163 Jul 2 07:47:40.592000 audit: BPF prog-id=71 op=UNLOAD Jul 2 07:47:40.592000 audit: BPF prog-id=70 op=UNLOAD Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.592000 audit: BPF prog-id=72 op=LOAD Jul 2 07:47:40.592000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000259e8 items=0 ppid=2383 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433666265343662373332343762616664363434306564353135323163 Jul 2 07:47:40.617694 env[1727]: time="2024-07-02T07:47:40.617630014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-20-37,Uid:d910a0da433ab948eea6d40cd6d86246,Namespace:kube-system,Attempt:0,} returns sandbox id \"e1b56a1828d1a805348cd663e6aceccc75d33e3e23fa770935e4e79d802b5fd2\"" Jul 2 07:47:40.624107 env[1727]: time="2024-07-02T07:47:40.624056367Z" level=info msg="CreateContainer within sandbox \"e1b56a1828d1a805348cd663e6aceccc75d33e3e23fa770935e4e79d802b5fd2\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 07:47:40.644582 env[1727]: time="2024-07-02T07:47:40.644480531Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-20-37,Uid:6f20d3b1d534ab5498fe00a60f6a58a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"3636723cd8f308ac69a7bef469d105571696f9d683fa7eb4e452e87b3bfe9a91\"" Jul 2 07:47:40.648390 env[1727]: time="2024-07-02T07:47:40.648311676Z" level=info msg="CreateContainer within sandbox \"3636723cd8f308ac69a7bef469d105571696f9d683fa7eb4e452e87b3bfe9a91\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 07:47:40.661624 env[1727]: time="2024-07-02T07:47:40.661567823Z" level=info msg="CreateContainer within sandbox \"e1b56a1828d1a805348cd663e6aceccc75d33e3e23fa770935e4e79d802b5fd2\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"883660be020aaf6d36d88557b2d573e2c2d6a618bc3905f5c4c46a3a456137b8\"" Jul 2 07:47:40.664186 env[1727]: time="2024-07-02T07:47:40.664117264Z" level=info msg="StartContainer for \"883660be020aaf6d36d88557b2d573e2c2d6a618bc3905f5c4c46a3a456137b8\"" Jul 2 07:47:40.680406 env[1727]: time="2024-07-02T07:47:40.680281395Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-20-37,Uid:902915cf8ab494cfd0f76dd7255a99af,Namespace:kube-system,Attempt:0,} returns sandbox id \"d3fbe46b73247bafd6440ed51521c43aa10058e13bedc1fa9692f2023c66cdad\"" Jul 2 07:47:40.685710 env[1727]: time="2024-07-02T07:47:40.685653303Z" level=info msg="CreateContainer within sandbox \"3636723cd8f308ac69a7bef469d105571696f9d683fa7eb4e452e87b3bfe9a91\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"7184f07ca10ff1f46a0b8728d376dedca2da254995cc0c5c76e53f0f7d54924a\"" Jul 2 07:47:40.686615 env[1727]: time="2024-07-02T07:47:40.686578803Z" level=info msg="StartContainer for \"7184f07ca10ff1f46a0b8728d376dedca2da254995cc0c5c76e53f0f7d54924a\"" Jul 2 07:47:40.688574 env[1727]: time="2024-07-02T07:47:40.688516155Z" level=info msg="CreateContainer within sandbox \"d3fbe46b73247bafd6440ed51521c43aa10058e13bedc1fa9692f2023c66cdad\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 07:47:40.703696 systemd[1]: Started cri-containerd-883660be020aaf6d36d88557b2d573e2c2d6a618bc3905f5c4c46a3a456137b8.scope. Jul 2 07:47:40.721347 env[1727]: time="2024-07-02T07:47:40.720598449Z" level=info msg="CreateContainer within sandbox \"d3fbe46b73247bafd6440ed51521c43aa10058e13bedc1fa9692f2023c66cdad\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"58b9dc8eee3b4b6c7b44720133c0122adffea6739ddf08d1bcd79ca303fb43e6\"" Jul 2 07:47:40.721494 env[1727]: time="2024-07-02T07:47:40.721398529Z" level=info msg="StartContainer for \"58b9dc8eee3b4b6c7b44720133c0122adffea6739ddf08d1bcd79ca303fb43e6\"" Jul 2 07:47:40.731113 systemd[1]: Started cri-containerd-7184f07ca10ff1f46a0b8728d376dedca2da254995cc0c5c76e53f0f7d54924a.scope. Jul 2 07:47:40.752419 kubelet[2344]: W0702 07:47:40.750202 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://172.31.20.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.752419 kubelet[2344]: E0702 07:47:40.750251 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.20.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.758000 audit: BPF prog-id=73 op=LOAD Jul 2 07:47:40.769000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.769000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2407 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838333636306265303230616166366433366438383535376232643537 Jul 2 07:47:40.769000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.769000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2407 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838333636306265303230616166366433366438383535376232643537 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit: BPF prog-id=74 op=LOAD Jul 2 07:47:40.771000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002cbca0 items=0 ppid=2407 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838333636306265303230616166366433366438383535376232643537 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit: BPF prog-id=75 op=LOAD Jul 2 07:47:40.771000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002cbce8 items=0 ppid=2407 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838333636306265303230616166366433366438383535376232643537 Jul 2 07:47:40.771000 audit: BPF prog-id=75 op=UNLOAD Jul 2 07:47:40.771000 audit: BPF prog-id=74 op=UNLOAD Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.771000 audit: BPF prog-id=76 op=LOAD Jul 2 07:47:40.771000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b80f8 items=0 ppid=2407 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838333636306265303230616166366433366438383535376232643537 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.789000 audit: BPF prog-id=77 op=LOAD Jul 2 07:47:40.790000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.790000 audit[2529]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2411 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383466303763613130666631663436613062383732386433373664 Jul 2 07:47:40.790000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.790000 audit[2529]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2411 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383466303763613130666631663436613062383732386433373664 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit: BPF prog-id=78 op=LOAD Jul 2 07:47:40.791000 audit[2529]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0001c26f0 items=0 ppid=2411 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383466303763613130666631663436613062383732386433373664 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit: BPF prog-id=79 op=LOAD Jul 2 07:47:40.791000 audit[2529]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0001c2738 items=0 ppid=2411 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383466303763613130666631663436613062383732386433373664 Jul 2 07:47:40.791000 audit: BPF prog-id=79 op=UNLOAD Jul 2 07:47:40.791000 audit: BPF prog-id=78 op=UNLOAD Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { perfmon } for pid=2529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit[2529]: AVC avc: denied { bpf } for pid=2529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.791000 audit: BPF prog-id=80 op=LOAD Jul 2 07:47:40.791000 audit[2529]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0001c2b48 items=0 ppid=2411 pid=2529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731383466303763613130666631663436613062383732386433373664 Jul 2 07:47:40.816118 systemd[1]: Started cri-containerd-58b9dc8eee3b4b6c7b44720133c0122adffea6739ddf08d1bcd79ca303fb43e6.scope. Jul 2 07:47:40.820660 kubelet[2344]: E0702 07:47:40.820259 2344 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.20.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-20-37?timeout=10s\": dial tcp 172.31.20.37:6443: connect: connection refused" interval="1.6s" Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.879000 audit: BPF prog-id=81 op=LOAD Jul 2 07:47:40.881000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.881000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2383 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623964633865656533623462366337623434373230313333633031 Jul 2 07:47:40.881000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.881000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2383 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623964633865656533623462366337623434373230313333633031 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.882000 audit: BPF prog-id=82 op=LOAD Jul 2 07:47:40.882000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d8f10 items=0 ppid=2383 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623964633865656533623462366337623434373230313333633031 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.888000 audit: BPF prog-id=83 op=LOAD Jul 2 07:47:40.888000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d8f58 items=0 ppid=2383 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623964633865656533623462366337623434373230313333633031 Jul 2 07:47:40.889000 audit: BPF prog-id=83 op=UNLOAD Jul 2 07:47:40.889000 audit: BPF prog-id=82 op=UNLOAD Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { perfmon } for pid=2553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit[2553]: AVC avc: denied { bpf } for pid=2553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:40.889000 audit: BPF prog-id=84 op=LOAD Jul 2 07:47:40.889000 audit[2553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d9368 items=0 ppid=2383 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:40.889000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538623964633865656533623462366337623434373230313333633031 Jul 2 07:47:40.893741 amazon-ssm-agent[1708]: 2024-07-02 07:47:40 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Jul 2 07:47:40.905758 env[1727]: time="2024-07-02T07:47:40.905685719Z" level=info msg="StartContainer for \"7184f07ca10ff1f46a0b8728d376dedca2da254995cc0c5c76e53f0f7d54924a\" returns successfully" Jul 2 07:47:40.909562 env[1727]: time="2024-07-02T07:47:40.909502978Z" level=info msg="StartContainer for \"883660be020aaf6d36d88557b2d573e2c2d6a618bc3905f5c4c46a3a456137b8\" returns successfully" Jul 2 07:47:40.923641 kubelet[2344]: I0702 07:47:40.923231 2344 kubelet_node_status.go:73] "Attempting to register node" node="ip-172-31-20-37" Jul 2 07:47:40.923827 kubelet[2344]: E0702 07:47:40.923757 2344 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.31.20.37:6443/api/v1/nodes\": dial tcp 172.31.20.37:6443: connect: connection refused" node="ip-172-31-20-37" Jul 2 07:47:40.948742 env[1727]: time="2024-07-02T07:47:40.948690982Z" level=info msg="StartContainer for \"58b9dc8eee3b4b6c7b44720133c0122adffea6739ddf08d1bcd79ca303fb43e6\" returns successfully" Jul 2 07:47:40.961188 kubelet[2344]: W0702 07:47:40.961148 2344 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://172.31.20.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:40.961188 kubelet[2344]: E0702 07:47:40.961195 2344 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.20.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:41.377112 kubelet[2344]: E0702 07:47:41.377077 2344 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.20.37:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.20.37:6443: connect: connection refused Jul 2 07:47:41.441278 kubelet[2344]: E0702 07:47:41.441244 2344 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.20.37:6443/api/v1/namespaces/default/events\": dial tcp 172.31.20.37:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-20-37.17de55cff720a18b default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-20-37,UID:ip-172-31-20-37,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-20-37,},FirstTimestamp:2024-07-02 07:47:39.394810251 +0000 UTC m=+0.643551086,LastTimestamp:2024-07-02 07:47:39.394810251 +0000 UTC m=+0.643551086,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-20-37,}" Jul 2 07:47:42.526273 kubelet[2344]: I0702 07:47:42.526247 2344 kubelet_node_status.go:73] "Attempting to register node" node="ip-172-31-20-37" Jul 2 07:47:42.601000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:42.601000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000540210 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:47:42.601000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:42.601000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:42.601000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000fa8040 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:47:42.601000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:43.924000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.932136 kernel: kauditd_printk_skb: 574 callbacks suppressed Jul 2 07:47:43.932284 kernel: audit: type=1400 audit(1719906463.924:559): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.924000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004c983f0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.939623 kernel: audit: type=1300 audit(1719906463.924:559): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004c983f0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.924000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.945354 kernel: audit: type=1327 audit(1719906463.924:559): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.925000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.954494 kernel: audit: type=1400 audit(1719906463.925:560): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.925000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0017f1ec0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.965492 kernel: audit: type=1300 audit(1719906463.925:560): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0017f1ec0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.925000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.977168 kernel: audit: type=1327 audit(1719906463.925:560): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.977308 kernel: audit: type=1400 audit(1719906463.925:561): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.925000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.925000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004c98570 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:44.002255 kernel: audit: type=1300 audit(1719906463.925:561): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004c98570 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:44.002411 kernel: audit: type=1327 audit(1719906463.925:561): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.925000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.929000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:44.009351 kernel: audit: type=1400 audit(1719906463.929:562): avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.929000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c004bad140 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.929000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.940000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.940000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c005032a20 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.940000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:43.940000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:43.940000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c004bad5f0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:47:43.940000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:47:44.072890 kubelet[2344]: E0702 07:47:44.072859 2344 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-20-37\" not found" node="ip-172-31-20-37" Jul 2 07:47:44.121196 kubelet[2344]: I0702 07:47:44.121166 2344 kubelet_node_status.go:76] "Successfully registered node" node="ip-172-31-20-37" Jul 2 07:47:44.379370 kubelet[2344]: I0702 07:47:44.379307 2344 apiserver.go:52] "Watching apiserver" Jul 2 07:47:44.416294 kubelet[2344]: I0702 07:47:44.416249 2344 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 07:47:46.885255 systemd[1]: Reloading. Jul 2 07:47:47.032790 /usr/lib/systemd/system-generators/torcx-generator[2639]: time="2024-07-02T07:47:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:47:47.032829 /usr/lib/systemd/system-generators/torcx-generator[2639]: time="2024-07-02T07:47:47Z" level=info msg="torcx already run" Jul 2 07:47:47.178819 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:47:47.178842 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:47:47.200109 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.311000 audit: BPF prog-id=85 op=LOAD Jul 2 07:47:47.311000 audit: BPF prog-id=46 op=UNLOAD Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.312000 audit: BPF prog-id=86 op=LOAD Jul 2 07:47:47.312000 audit: BPF prog-id=47 op=UNLOAD Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit: BPF prog-id=87 op=LOAD Jul 2 07:47:47.313000 audit: BPF prog-id=48 op=UNLOAD Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit: BPF prog-id=88 op=LOAD Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.313000 audit: BPF prog-id=89 op=LOAD Jul 2 07:47:47.314000 audit: BPF prog-id=49 op=UNLOAD Jul 2 07:47:47.314000 audit: BPF prog-id=50 op=UNLOAD Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.317000 audit: BPF prog-id=90 op=LOAD Jul 2 07:47:47.317000 audit: BPF prog-id=69 op=UNLOAD Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.318000 audit: BPF prog-id=91 op=LOAD Jul 2 07:47:47.318000 audit: BPF prog-id=51 op=UNLOAD Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit: BPF prog-id=92 op=LOAD Jul 2 07:47:47.320000 audit: BPF prog-id=52 op=UNLOAD Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit: BPF prog-id=93 op=LOAD Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.321000 audit: BPF prog-id=94 op=LOAD Jul 2 07:47:47.321000 audit: BPF prog-id=53 op=UNLOAD Jul 2 07:47:47.321000 audit: BPF prog-id=54 op=UNLOAD Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.323000 audit: BPF prog-id=95 op=LOAD Jul 2 07:47:47.323000 audit: BPF prog-id=55 op=UNLOAD Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit: BPF prog-id=96 op=LOAD Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.324000 audit: BPF prog-id=97 op=LOAD Jul 2 07:47:47.324000 audit: BPF prog-id=56 op=UNLOAD Jul 2 07:47:47.324000 audit: BPF prog-id=57 op=UNLOAD Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.327000 audit: BPF prog-id=98 op=LOAD Jul 2 07:47:47.327000 audit: BPF prog-id=73 op=UNLOAD Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit: BPF prog-id=99 op=LOAD Jul 2 07:47:47.328000 audit: BPF prog-id=65 op=UNLOAD Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit: BPF prog-id=100 op=LOAD Jul 2 07:47:47.329000 audit: BPF prog-id=81 op=UNLOAD Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.330000 audit: BPF prog-id=101 op=LOAD Jul 2 07:47:47.330000 audit: BPF prog-id=61 op=UNLOAD Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.331000 audit: BPF prog-id=102 op=LOAD Jul 2 07:47:47.331000 audit: BPF prog-id=58 op=UNLOAD Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit: BPF prog-id=103 op=LOAD Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.332000 audit: BPF prog-id=104 op=LOAD Jul 2 07:47:47.332000 audit: BPF prog-id=59 op=UNLOAD Jul 2 07:47:47.332000 audit: BPF prog-id=60 op=UNLOAD Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.333000 audit: BPF prog-id=105 op=LOAD Jul 2 07:47:47.333000 audit: BPF prog-id=77 op=UNLOAD Jul 2 07:47:47.354734 kubelet[2344]: I0702 07:47:47.353953 2344 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:47:47.354179 systemd[1]: Stopping kubelet.service... Jul 2 07:47:47.374827 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:47:47.375401 systemd[1]: Stopped kubelet.service. Jul 2 07:47:47.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:47.377913 systemd[1]: Starting kubelet.service... Jul 2 07:47:47.661114 update_engine[1722]: I0702 07:47:47.660981 1722 update_attempter.cc:509] Updating boot flags... Jul 2 07:47:48.871800 systemd[1]: Started kubelet.service. Jul 2 07:47:48.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:48.997716 kubelet[2790]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:48.997716 kubelet[2790]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:47:48.997716 kubelet[2790]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:48.999652 kubelet[2790]: I0702 07:47:48.999600 2790 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:47:49.005923 kubelet[2790]: I0702 07:47:49.005710 2790 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 07:47:49.005923 kubelet[2790]: I0702 07:47:49.005739 2790 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:47:49.006133 kubelet[2790]: I0702 07:47:49.006060 2790 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 07:47:49.009200 kubelet[2790]: I0702 07:47:49.008073 2790 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 07:47:49.010989 kubelet[2790]: I0702 07:47:49.010955 2790 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:47:49.040448 kubelet[2790]: I0702 07:47:49.040273 2790 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:47:49.041362 kubelet[2790]: I0702 07:47:49.040861 2790 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:47:49.041362 kubelet[2790]: I0702 07:47:49.041135 2790 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:47:49.041362 kubelet[2790]: I0702 07:47:49.041171 2790 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:47:49.041362 kubelet[2790]: I0702 07:47:49.041187 2790 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:47:49.041362 kubelet[2790]: I0702 07:47:49.041232 2790 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:49.075222 kubelet[2790]: I0702 07:47:49.075182 2790 kubelet.go:396] "Attempting to sync node with API server" Jul 2 07:47:49.078411 kubelet[2790]: I0702 07:47:49.078386 2790 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:47:49.078605 kubelet[2790]: I0702 07:47:49.078595 2790 kubelet.go:312] "Adding apiserver pod source" Jul 2 07:47:49.078797 kubelet[2790]: I0702 07:47:49.078781 2790 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:47:49.094316 kubelet[2790]: I0702 07:47:49.093113 2790 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:47:49.094316 kubelet[2790]: I0702 07:47:49.093508 2790 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 07:47:49.094316 kubelet[2790]: I0702 07:47:49.094299 2790 server.go:1256] "Started kubelet" Jul 2 07:47:49.113384 kernel: kauditd_printk_skb: 254 callbacks suppressed Jul 2 07:47:49.113551 kernel: audit: type=1400 audit(1719906469.098:811): avc: denied { mac_admin } for pid=2790 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:49.115238 kernel: audit: type=1401 audit(1719906469.098:811): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:49.115311 kernel: audit: type=1300 audit(1719906469.098:811): arch=c000003e syscall=188 success=no exit=-22 a0=c0007f3650 a1=c000a3cb10 a2=c0007f3620 a3=25 items=0 ppid=1 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:49.098000 audit[2790]: AVC avc: denied { mac_admin } for pid=2790 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:49.098000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:49.098000 audit[2790]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007f3650 a1=c000a3cb10 a2=c0007f3620 a3=25 items=0 ppid=1 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:49.098000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.100131 2790 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.100180 2790 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.100215 2790 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.107464 2790 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.108699 2790 server.go:461] "Adding debug handlers to kubelet server" Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.110675 2790 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 07:47:49.115756 kubelet[2790]: I0702 07:47:49.110868 2790 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:47:49.120188 kernel: audit: type=1327 audit(1719906469.098:811): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:49.120532 kernel: audit: type=1400 audit(1719906469.098:812): avc: denied { mac_admin } for pid=2790 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:49.098000 audit[2790]: AVC avc: denied { mac_admin } for pid=2790 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:49.098000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:49.125591 kernel: audit: type=1401 audit(1719906469.098:812): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:49.098000 audit[2790]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00074fe80 a1=c000a3cb28 a2=c0007f36e0 a3=25 items=0 ppid=1 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:49.131038 kernel: audit: type=1300 audit(1719906469.098:812): arch=c000003e syscall=188 success=no exit=-22 a0=c00074fe80 a1=c000a3cb28 a2=c0007f36e0 a3=25 items=0 ppid=1 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:49.131110 kernel: audit: type=1327 audit(1719906469.098:812): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:49.098000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:49.157914 kubelet[2790]: I0702 07:47:49.157871 2790 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 07:47:49.163544 kubelet[2790]: I0702 07:47:49.163516 2790 apiserver.go:52] "Watching apiserver" Jul 2 07:47:49.176830 kubelet[2790]: I0702 07:47:49.176782 2790 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:47:49.179658 kubelet[2790]: I0702 07:47:49.179631 2790 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:47:49.179952 kubelet[2790]: I0702 07:47:49.179939 2790 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:47:49.180054 kubelet[2790]: I0702 07:47:49.180046 2790 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 07:47:49.180150 kubelet[2790]: E0702 07:47:49.180143 2790 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:47:49.187229 kubelet[2790]: I0702 07:47:49.187202 2790 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:47:49.191476 kubelet[2790]: I0702 07:47:49.191354 2790 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 07:47:49.192140 kubelet[2790]: I0702 07:47:49.192124 2790 factory.go:221] Registration of the systemd container factory successfully Jul 2 07:47:49.192425 kubelet[2790]: I0702 07:47:49.192383 2790 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 07:47:49.197192 kubelet[2790]: I0702 07:47:49.197176 2790 factory.go:221] Registration of the containerd container factory successfully Jul 2 07:47:49.209026 kubelet[2790]: E0702 07:47:49.209001 2790 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:47:49.262825 kubelet[2790]: I0702 07:47:49.262804 2790 kubelet_node_status.go:73] "Attempting to register node" node="ip-172-31-20-37" Jul 2 07:47:49.281259 kubelet[2790]: E0702 07:47:49.281228 2790 kubelet.go:2353] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 07:47:49.281820 kubelet[2790]: I0702 07:47:49.281798 2790 kubelet_node_status.go:112] "Node was previously registered" node="ip-172-31-20-37" Jul 2 07:47:49.286314 kubelet[2790]: I0702 07:47:49.286294 2790 kubelet_node_status.go:76] "Successfully registered node" node="ip-172-31-20-37" Jul 2 07:47:49.307175 kubelet[2790]: I0702 07:47:49.307138 2790 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:47:49.307175 kubelet[2790]: I0702 07:47:49.307178 2790 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:47:49.307518 kubelet[2790]: I0702 07:47:49.307199 2790 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:49.307518 kubelet[2790]: I0702 07:47:49.307447 2790 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 07:47:49.307518 kubelet[2790]: I0702 07:47:49.307475 2790 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 07:47:49.307518 kubelet[2790]: I0702 07:47:49.307501 2790 policy_none.go:49] "None policy: Start" Jul 2 07:47:49.308362 kubelet[2790]: I0702 07:47:49.308342 2790 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 07:47:49.308564 kubelet[2790]: I0702 07:47:49.308377 2790 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:47:49.309671 kubelet[2790]: I0702 07:47:49.308727 2790 state_mem.go:75] "Updated machine memory state" Jul 2 07:47:49.315370 kubelet[2790]: I0702 07:47:49.315348 2790 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:47:49.322079 kernel: audit: type=1400 audit(1719906469.314:813): avc: denied { mac_admin } for pid=2790 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:49.322211 kernel: audit: type=1401 audit(1719906469.314:813): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:49.314000 audit[2790]: AVC avc: denied { mac_admin } for pid=2790 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:49.314000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:49.314000 audit[2790]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cab7d0 a1=c001062108 a2=c000cab7a0 a3=25 items=0 ppid=1 pid=2790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:49.314000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:49.323422 kubelet[2790]: I0702 07:47:49.318473 2790 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:47:49.323422 kubelet[2790]: I0702 07:47:49.318990 2790 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:47:49.482068 kubelet[2790]: I0702 07:47:49.481858 2790 topology_manager.go:215] "Topology Admit Handler" podUID="6f20d3b1d534ab5498fe00a60f6a58a5" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-20-37" Jul 2 07:47:49.482068 kubelet[2790]: I0702 07:47:49.482007 2790 topology_manager.go:215] "Topology Admit Handler" podUID="d910a0da433ab948eea6d40cd6d86246" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:49.482068 kubelet[2790]: I0702 07:47:49.482070 2790 topology_manager.go:215] "Topology Admit Handler" podUID="902915cf8ab494cfd0f76dd7255a99af" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-20-37" Jul 2 07:47:49.527645 kubelet[2790]: I0702 07:47:49.527592 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-20-37" podStartSLOduration=4.5275447060000005 podStartE2EDuration="4.527544706s" podCreationTimestamp="2024-07-02 07:47:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:49.513887259 +0000 UTC m=+0.605100442" watchObservedRunningTime="2024-07-02 07:47:49.527544706 +0000 UTC m=+0.618757871" Jul 2 07:47:49.527884 kubelet[2790]: I0702 07:47:49.527731 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-20-37" podStartSLOduration=0.527706523 podStartE2EDuration="527.706523ms" podCreationTimestamp="2024-07-02 07:47:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:49.525068115 +0000 UTC m=+0.616281294" watchObservedRunningTime="2024-07-02 07:47:49.527706523 +0000 UTC m=+0.618919708" Jul 2 07:47:49.535439 kubelet[2790]: I0702 07:47:49.535278 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-20-37" podStartSLOduration=0.535228359 podStartE2EDuration="535.228359ms" podCreationTimestamp="2024-07-02 07:47:49 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:49.534909423 +0000 UTC m=+0.626122612" watchObservedRunningTime="2024-07-02 07:47:49.535228359 +0000 UTC m=+0.626441545" Jul 2 07:47:49.559178 kubelet[2790]: I0702 07:47:49.558891 2790 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 07:47:49.592931 kubelet[2790]: I0702 07:47:49.592885 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:49.593206 kubelet[2790]: I0702 07:47:49.593192 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-k8s-certs\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:49.593388 kubelet[2790]: I0702 07:47:49.593374 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-kubeconfig\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:49.593535 kubelet[2790]: I0702 07:47:49.593524 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:49.593672 kubelet[2790]: I0702 07:47:49.593661 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/902915cf8ab494cfd0f76dd7255a99af-kubeconfig\") pod \"kube-scheduler-ip-172-31-20-37\" (UID: \"902915cf8ab494cfd0f76dd7255a99af\") " pod="kube-system/kube-scheduler-ip-172-31-20-37" Jul 2 07:47:49.593911 kubelet[2790]: I0702 07:47:49.593894 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6f20d3b1d534ab5498fe00a60f6a58a5-k8s-certs\") pod \"kube-apiserver-ip-172-31-20-37\" (UID: \"6f20d3b1d534ab5498fe00a60f6a58a5\") " pod="kube-system/kube-apiserver-ip-172-31-20-37" Jul 2 07:47:49.594068 kubelet[2790]: I0702 07:47:49.594046 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6f20d3b1d534ab5498fe00a60f6a58a5-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-20-37\" (UID: \"6f20d3b1d534ab5498fe00a60f6a58a5\") " pod="kube-system/kube-apiserver-ip-172-31-20-37" Jul 2 07:47:49.594148 kubelet[2790]: I0702 07:47:49.594091 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d910a0da433ab948eea6d40cd6d86246-ca-certs\") pod \"kube-controller-manager-ip-172-31-20-37\" (UID: \"d910a0da433ab948eea6d40cd6d86246\") " pod="kube-system/kube-controller-manager-ip-172-31-20-37" Jul 2 07:47:49.594148 kubelet[2790]: I0702 07:47:49.594128 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6f20d3b1d534ab5498fe00a60f6a58a5-ca-certs\") pod \"kube-apiserver-ip-172-31-20-37\" (UID: \"6f20d3b1d534ab5498fe00a60f6a58a5\") " pod="kube-system/kube-apiserver-ip-172-31-20-37" Jul 2 07:47:49.678000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:49.678000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ed8900 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:47:49.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:49.679000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:49.679000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ed8ac0 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:47:49.679000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:49.680000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:49.680000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:49.680000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ed8c80 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:47:49.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:49.680000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00083dc20 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:47:49.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:54.764704 sudo[2002]: pam_unix(sudo:session): session closed for user root Jul 2 07:47:54.763000 audit[2002]: USER_END pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:54.768362 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 2 07:47:54.768487 kernel: audit: type=1106 audit(1719906474.763:818): pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:54.773480 kernel: audit: type=1104 audit(1719906474.765:819): pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:54.765000 audit[2002]: CRED_DISP pid=2002 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:54.793356 sshd[1998]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:54.794000 audit[1998]: USER_END pid=1998 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:54.797668 systemd[1]: sshd@6-172.31.20.37:22-139.178.89.65:41400.service: Deactivated successfully. Jul 2 07:47:54.795000 audit[1998]: CRED_DISP pid=1998 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:54.799367 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 07:47:54.799551 systemd[1]: session-7.scope: Consumed 5.002s CPU time. Jul 2 07:47:54.804404 systemd-logind[1720]: Session 7 logged out. Waiting for processes to exit. Jul 2 07:47:54.806096 systemd-logind[1720]: Removed session 7. Jul 2 07:47:54.806957 kernel: audit: type=1106 audit(1719906474.794:820): pid=1998 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:54.807019 kernel: audit: type=1104 audit(1719906474.795:821): pid=1998 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:47:54.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.37:22-139.178.89.65:41400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:54.811371 kernel: audit: type=1131 audit(1719906474.798:822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.20.37:22-139.178.89.65:41400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:00.869000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521015 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 07:48:00.869000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012ee500 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:00.882199 kernel: audit: type=1400 audit(1719906480.869:823): avc: denied { watch } for pid=2540 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521015 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 07:48:00.882368 kernel: audit: type=1300 audit(1719906480.869:823): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012ee500 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:00.869000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:00.888445 kernel: audit: type=1327 audit(1719906480.869:823): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:01.026574 kubelet[2790]: I0702 07:48:01.026542 2790 kuberuntime_manager.go:1529] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 07:48:01.027323 env[1727]: time="2024-07-02T07:48:01.027279125Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 07:48:01.027965 kubelet[2790]: I0702 07:48:01.027907 2790 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 07:48:01.761980 kubelet[2790]: I0702 07:48:01.761836 2790 topology_manager.go:215] "Topology Admit Handler" podUID="f6df223e-06a4-43b8-95ba-987224c6cc4c" podNamespace="kube-system" podName="kube-proxy-rb5bg" Jul 2 07:48:01.771092 systemd[1]: Created slice kubepods-besteffort-podf6df223e_06a4_43b8_95ba_987224c6cc4c.slice. Jul 2 07:48:01.862864 kubelet[2790]: I0702 07:48:01.862830 2790 topology_manager.go:215] "Topology Admit Handler" podUID="8bac6bfd-0655-412a-a7ec-24e0c917a973" podNamespace="tigera-operator" podName="tigera-operator-76c4974c85-cmk4j" Jul 2 07:48:01.870233 systemd[1]: Created slice kubepods-besteffort-pod8bac6bfd_0655_412a_a7ec_24e0c917a973.slice. Jul 2 07:48:01.892231 kubelet[2790]: I0702 07:48:01.892197 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g2vsd\" (UniqueName: \"kubernetes.io/projected/f6df223e-06a4-43b8-95ba-987224c6cc4c-kube-api-access-g2vsd\") pod \"kube-proxy-rb5bg\" (UID: \"f6df223e-06a4-43b8-95ba-987224c6cc4c\") " pod="kube-system/kube-proxy-rb5bg" Jul 2 07:48:01.892516 kubelet[2790]: I0702 07:48:01.892484 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f6df223e-06a4-43b8-95ba-987224c6cc4c-kube-proxy\") pod \"kube-proxy-rb5bg\" (UID: \"f6df223e-06a4-43b8-95ba-987224c6cc4c\") " pod="kube-system/kube-proxy-rb5bg" Jul 2 07:48:01.892768 kubelet[2790]: I0702 07:48:01.892753 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f6df223e-06a4-43b8-95ba-987224c6cc4c-lib-modules\") pod \"kube-proxy-rb5bg\" (UID: \"f6df223e-06a4-43b8-95ba-987224c6cc4c\") " pod="kube-system/kube-proxy-rb5bg" Jul 2 07:48:01.892932 kubelet[2790]: I0702 07:48:01.892919 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f6df223e-06a4-43b8-95ba-987224c6cc4c-xtables-lock\") pod \"kube-proxy-rb5bg\" (UID: \"f6df223e-06a4-43b8-95ba-987224c6cc4c\") " pod="kube-system/kube-proxy-rb5bg" Jul 2 07:48:01.993381 kubelet[2790]: I0702 07:48:01.993343 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2nrjs\" (UniqueName: \"kubernetes.io/projected/8bac6bfd-0655-412a-a7ec-24e0c917a973-kube-api-access-2nrjs\") pod \"tigera-operator-76c4974c85-cmk4j\" (UID: \"8bac6bfd-0655-412a-a7ec-24e0c917a973\") " pod="tigera-operator/tigera-operator-76c4974c85-cmk4j" Jul 2 07:48:01.993657 kubelet[2790]: I0702 07:48:01.993637 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/8bac6bfd-0655-412a-a7ec-24e0c917a973-var-lib-calico\") pod \"tigera-operator-76c4974c85-cmk4j\" (UID: \"8bac6bfd-0655-412a-a7ec-24e0c917a973\") " pod="tigera-operator/tigera-operator-76c4974c85-cmk4j" Jul 2 07:48:02.083276 env[1727]: time="2024-07-02T07:48:02.083143613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rb5bg,Uid:f6df223e-06a4-43b8-95ba-987224c6cc4c,Namespace:kube-system,Attempt:0,}" Jul 2 07:48:02.120467 env[1727]: time="2024-07-02T07:48:02.120304950Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:02.120663 env[1727]: time="2024-07-02T07:48:02.120473308Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:02.120663 env[1727]: time="2024-07-02T07:48:02.120504925Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:02.120885 env[1727]: time="2024-07-02T07:48:02.120809791Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fd2e96427aba8cc6f64f45be3c854dc9090d8d573d8f78ad39bd3cdcee7a7eff pid=2876 runtime=io.containerd.runc.v2 Jul 2 07:48:02.155294 systemd[1]: Started cri-containerd-fd2e96427aba8cc6f64f45be3c854dc9090d8d573d8f78ad39bd3cdcee7a7eff.scope. Jul 2 07:48:02.180479 env[1727]: time="2024-07-02T07:48:02.180394159Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-cmk4j,Uid:8bac6bfd-0655-412a-a7ec-24e0c917a973,Namespace:tigera-operator,Attempt:0,}" Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.191126 kernel: audit: type=1400 audit(1719906482.183:824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.191373 kernel: audit: type=1400 audit(1719906482.183:825): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198447 kernel: audit: type=1400 audit(1719906482.183:826): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198568 kernel: audit: type=1400 audit(1719906482.183:827): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.201740 kernel: audit: type=1400 audit(1719906482.183:828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.205082 kernel: audit: type=1400 audit(1719906482.183:829): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.183000 audit: BPF prog-id=106 op=LOAD Jul 2 07:48:02.191000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.191000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2876 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326539363432376162613863633666363466343562653363383534 Jul 2 07:48:02.191000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.191000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2876 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326539363432376162613863633666363466343562653363383534 Jul 2 07:48:02.209343 kernel: audit: type=1400 audit(1719906482.183:830): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.192000 audit: BPF prog-id=107 op=LOAD Jul 2 07:48:02.192000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003b9280 items=0 ppid=2876 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.192000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326539363432376162613863633666363466343562653363383534 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.194000 audit: BPF prog-id=108 op=LOAD Jul 2 07:48:02.194000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003b92c8 items=0 ppid=2876 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326539363432376162613863633666363466343562653363383534 Jul 2 07:48:02.198000 audit: BPF prog-id=108 op=UNLOAD Jul 2 07:48:02.198000 audit: BPF prog-id=107 op=UNLOAD Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { perfmon } for pid=2887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit[2887]: AVC avc: denied { bpf } for pid=2887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.198000 audit: BPF prog-id=109 op=LOAD Jul 2 07:48:02.198000 audit[2887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003b96d8 items=0 ppid=2876 pid=2887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664326539363432376162613863633666363466343562653363383534 Jul 2 07:48:02.233228 env[1727]: time="2024-07-02T07:48:02.233139796Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:02.233507 env[1727]: time="2024-07-02T07:48:02.233467523Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:02.233632 env[1727]: time="2024-07-02T07:48:02.233608828Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:02.235753 env[1727]: time="2024-07-02T07:48:02.235700713Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rb5bg,Uid:f6df223e-06a4-43b8-95ba-987224c6cc4c,Namespace:kube-system,Attempt:0,} returns sandbox id \"fd2e96427aba8cc6f64f45be3c854dc9090d8d573d8f78ad39bd3cdcee7a7eff\"" Jul 2 07:48:02.237679 env[1727]: time="2024-07-02T07:48:02.235015982Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d782ef58bde8c75ffe7d21dd725f39c2fdd9acd59243727d5d08c9312481d6e9 pid=2918 runtime=io.containerd.runc.v2 Jul 2 07:48:02.241162 env[1727]: time="2024-07-02T07:48:02.240662659Z" level=info msg="CreateContainer within sandbox \"fd2e96427aba8cc6f64f45be3c854dc9090d8d573d8f78ad39bd3cdcee7a7eff\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 07:48:02.259845 systemd[1]: Started cri-containerd-d782ef58bde8c75ffe7d21dd725f39c2fdd9acd59243727d5d08c9312481d6e9.scope. Jul 2 07:48:02.286706 env[1727]: time="2024-07-02T07:48:02.286648804Z" level=info msg="CreateContainer within sandbox \"fd2e96427aba8cc6f64f45be3c854dc9090d8d573d8f78ad39bd3cdcee7a7eff\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"c11a73c57edf4999c8154e92bf83c9b949175b4264aaccd4a9aabf0d11b19939\"" Jul 2 07:48:02.290074 env[1727]: time="2024-07-02T07:48:02.290024696Z" level=info msg="StartContainer for \"c11a73c57edf4999c8154e92bf83c9b949175b4264aaccd4a9aabf0d11b19939\"" Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.293000 audit: BPF prog-id=110 op=LOAD Jul 2 07:48:02.295000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.295000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2918 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383265663538626465386337356666653764323164643732356633 Jul 2 07:48:02.295000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.295000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2918 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383265663538626465386337356666653764323164643732356633 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.296000 audit: BPF prog-id=111 op=LOAD Jul 2 07:48:02.296000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003bea00 items=0 ppid=2918 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383265663538626465386337356666653764323164643732356633 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit: BPF prog-id=112 op=LOAD Jul 2 07:48:02.297000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003bea48 items=0 ppid=2918 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383265663538626465386337356666653764323164643732356633 Jul 2 07:48:02.297000 audit: BPF prog-id=112 op=UNLOAD Jul 2 07:48:02.297000 audit: BPF prog-id=111 op=UNLOAD Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.297000 audit: BPF prog-id=113 op=LOAD Jul 2 07:48:02.297000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003bee58 items=0 ppid=2918 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383265663538626465386337356666653764323164643732356633 Jul 2 07:48:02.326778 systemd[1]: Started cri-containerd-c11a73c57edf4999c8154e92bf83c9b949175b4264aaccd4a9aabf0d11b19939.scope. Jul 2 07:48:02.363392 env[1727]: time="2024-07-02T07:48:02.363242949Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-cmk4j,Uid:8bac6bfd-0655-412a-a7ec-24e0c917a973,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"d782ef58bde8c75ffe7d21dd725f39c2fdd9acd59243727d5d08c9312481d6e9\"" Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fd818c812f8 items=0 ppid=2876 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331316137336335376564663439393963383135346539326266383363 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit: BPF prog-id=114 op=LOAD Jul 2 07:48:02.364000 audit[2954]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000025ab8 items=0 ppid=2876 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331316137336335376564663439393963383135346539326266383363 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit: BPF prog-id=115 op=LOAD Jul 2 07:48:02.364000 audit[2954]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000025b08 items=0 ppid=2876 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331316137336335376564663439393963383135346539326266383363 Jul 2 07:48:02.364000 audit: BPF prog-id=115 op=UNLOAD Jul 2 07:48:02.364000 audit: BPF prog-id=114 op=UNLOAD Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { perfmon } for pid=2954 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit[2954]: AVC avc: denied { bpf } for pid=2954 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:02.364000 audit: BPF prog-id=116 op=LOAD Jul 2 07:48:02.364000 audit[2954]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000025b98 items=0 ppid=2876 pid=2954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331316137336335376564663439393963383135346539326266383363 Jul 2 07:48:02.373901 env[1727]: time="2024-07-02T07:48:02.373864050Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 07:48:02.389819 env[1727]: time="2024-07-02T07:48:02.389781399Z" level=info msg="StartContainer for \"c11a73c57edf4999c8154e92bf83c9b949175b4264aaccd4a9aabf0d11b19939\" returns successfully" Jul 2 07:48:02.947000 audit[3009]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:02.947000 audit[3009]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec0616b60 a2=0 a3=7ffec0616b4c items=0 ppid=2964 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:48:02.949000 audit[3010]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=3010 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:02.949000 audit[3010]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb6253fb0 a2=0 a3=7fffb6253f9c items=0 ppid=2964 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.949000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:48:02.953000 audit[3013]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=3013 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:02.953000 audit[3013]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe41e7f230 a2=0 a3=7ffe41e7f21c items=0 ppid=2964 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.953000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:48:02.955000 audit[3014]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=3014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:02.955000 audit[3014]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd391acbe0 a2=0 a3=7ffd391acbcc items=0 ppid=2964 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:48:02.956000 audit[3012]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3012 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:02.956000 audit[3012]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbbca31f0 a2=0 a3=7ffcbbca31dc items=0 ppid=2964 pid=3012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:48:02.959000 audit[3015]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3015 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:02.959000 audit[3015]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3084a8a0 a2=0 a3=7fff3084a88c items=0 ppid=2964 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:48:03.019353 systemd[1]: run-containerd-runc-k8s.io-fd2e96427aba8cc6f64f45be3c854dc9090d8d573d8f78ad39bd3cdcee7a7eff-runc.x792Ho.mount: Deactivated successfully. Jul 2 07:48:03.066000 audit[3016]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.066000 audit[3016]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffedd26ab80 a2=0 a3=7ffedd26ab6c items=0 ppid=2964 pid=3016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.066000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:48:03.072000 audit[3018]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.072000 audit[3018]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffd5458c10 a2=0 a3=7fffd5458bfc items=0 ppid=2964 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.072000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 07:48:03.078000 audit[3021]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.078000 audit[3021]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc41197d50 a2=0 a3=7ffc41197d3c items=0 ppid=2964 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 07:48:03.080000 audit[3022]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.080000 audit[3022]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff01f9d2c0 a2=0 a3=7fff01f9d2ac items=0 ppid=2964 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:48:03.083000 audit[3024]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.083000 audit[3024]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffe81b0580 a2=0 a3=7fffe81b056c items=0 ppid=2964 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:48:03.091000 audit[3025]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3025 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.091000 audit[3025]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4b94a3e0 a2=0 a3=7ffd4b94a3cc items=0 ppid=2964 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:48:03.096000 audit[3027]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.096000 audit[3027]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc6373cd30 a2=0 a3=7ffc6373cd1c items=0 ppid=2964 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:48:03.103000 audit[3030]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.103000 audit[3030]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdaeecb060 a2=0 a3=7ffdaeecb04c items=0 ppid=2964 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 07:48:03.105000 audit[3031]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.105000 audit[3031]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdcceeb8b0 a2=0 a3=7ffdcceeb89c items=0 ppid=2964 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:48:03.108000 audit[3033]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.108000 audit[3033]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd7be25b0 a2=0 a3=7fffd7be259c items=0 ppid=2964 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:48:03.110000 audit[3034]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3034 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.110000 audit[3034]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe44e9b650 a2=0 a3=7ffe44e9b63c items=0 ppid=2964 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:48:03.114000 audit[3036]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.114000 audit[3036]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa1719580 a2=0 a3=7fffa171956c items=0 ppid=2964 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:48:03.119000 audit[3039]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.119000 audit[3039]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd4e2fea70 a2=0 a3=7ffd4e2fea5c items=0 ppid=2964 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:48:03.124000 audit[3042]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.124000 audit[3042]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe61ee2cc0 a2=0 a3=7ffe61ee2cac items=0 ppid=2964 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:48:03.126000 audit[3043]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.126000 audit[3043]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeedab8490 a2=0 a3=7ffeedab847c items=0 ppid=2964 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.126000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:48:03.131000 audit[3045]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.131000 audit[3045]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffcef27eb60 a2=0 a3=7ffcef27eb4c items=0 ppid=2964 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.131000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:48:03.135000 audit[3048]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.135000 audit[3048]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd70795b00 a2=0 a3=7ffd70795aec items=0 ppid=2964 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.135000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:48:03.137000 audit[3049]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.137000 audit[3049]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffee98e4b0 a2=0 a3=7fffee98e49c items=0 ppid=2964 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.137000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:48:03.140000 audit[3051]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3051 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:48:03.140000 audit[3051]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffed25d0ff0 a2=0 a3=7ffed25d0fdc items=0 ppid=2964 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.140000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:48:03.171000 audit[3057]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:03.171000 audit[3057]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc9227f5c0 a2=0 a3=7ffc9227f5ac items=0 ppid=2964 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.171000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:03.181000 audit[3057]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:03.181000 audit[3057]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffc9227f5c0 a2=0 a3=7ffc9227f5ac items=0 ppid=2964 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.181000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:03.186000 audit[3062]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3062 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.186000 audit[3062]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd8b5138a0 a2=0 a3=7ffd8b51388c items=0 ppid=2964 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:48:03.190000 audit[3064]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3064 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.190000 audit[3064]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe5102ff10 a2=0 a3=7ffe5102fefc items=0 ppid=2964 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 07:48:03.195000 audit[3067]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.195000 audit[3067]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd873ecaa0 a2=0 a3=7ffd873eca8c items=0 ppid=2964 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 07:48:03.197000 audit[3068]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3068 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.197000 audit[3068]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb6da1c20 a2=0 a3=7ffdb6da1c0c items=0 ppid=2964 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:48:03.200000 audit[3070]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.200000 audit[3070]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc6b292780 a2=0 a3=7ffc6b29276c items=0 ppid=2964 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.200000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:48:03.204000 audit[3071]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3071 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.204000 audit[3071]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9a278c20 a2=0 a3=7ffd9a278c0c items=0 ppid=2964 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.204000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:48:03.207000 audit[3073]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.207000 audit[3073]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdf342e230 a2=0 a3=7ffdf342e21c items=0 ppid=2964 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 07:48:03.212000 audit[3076]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3076 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.212000 audit[3076]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcc262e130 a2=0 a3=7ffcc262e11c items=0 ppid=2964 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.212000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:48:03.214000 audit[3077]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3077 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.214000 audit[3077]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff449eafe0 a2=0 a3=7fff449eafcc items=0 ppid=2964 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.214000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:48:03.218000 audit[3079]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.218000 audit[3079]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffea00dcf80 a2=0 a3=7ffea00dcf6c items=0 ppid=2964 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.218000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:48:03.220000 audit[3080]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3080 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.220000 audit[3080]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee0ffd3c0 a2=0 a3=7ffee0ffd3ac items=0 ppid=2964 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.220000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:48:03.223000 audit[3082]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.223000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc34f42a20 a2=0 a3=7ffc34f42a0c items=0 ppid=2964 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.223000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:48:03.228000 audit[3085]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.228000 audit[3085]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd6e8637f0 a2=0 a3=7ffd6e8637dc items=0 ppid=2964 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.228000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:48:03.239000 audit[3088]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.239000 audit[3088]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffe3198e60 a2=0 a3=7fffe3198e4c items=0 ppid=2964 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.239000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 07:48:03.241000 audit[3089]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.241000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd2e43cb90 a2=0 a3=7ffd2e43cb7c items=0 ppid=2964 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.241000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:48:03.244000 audit[3091]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3091 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.244000 audit[3091]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd28c56f60 a2=0 a3=7ffd28c56f4c items=0 ppid=2964 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.244000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:48:03.248000 audit[3094]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3094 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.248000 audit[3094]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffe5278b350 a2=0 a3=7ffe5278b33c items=0 ppid=2964 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.248000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:48:03.250000 audit[3095]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.250000 audit[3095]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd844b8580 a2=0 a3=7ffd844b856c items=0 ppid=2964 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:48:03.254000 audit[3097]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3097 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.254000 audit[3097]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffcff128a50 a2=0 a3=7ffcff128a3c items=0 ppid=2964 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:48:03.256000 audit[3098]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.256000 audit[3098]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe56795b40 a2=0 a3=7ffe56795b2c items=0 ppid=2964 pid=3098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.256000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:48:03.259000 audit[3100]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.259000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe944d3640 a2=0 a3=7ffe944d362c items=0 ppid=2964 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:48:03.264000 audit[3103]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:48:03.264000 audit[3103]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffea37d8720 a2=0 a3=7ffea37d870c items=0 ppid=2964 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.264000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:48:03.268000 audit[3105]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:48:03.268000 audit[3105]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7ffde150c980 a2=0 a3=7ffde150c96c items=0 ppid=2964 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.268000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:03.269000 audit[3105]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:48:03.269000 audit[3105]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffde150c980 a2=0 a3=7ffde150c96c items=0 ppid=2964 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.269000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:03.629441 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1666789523.mount: Deactivated successfully. Jul 2 07:48:04.695647 env[1727]: time="2024-07-02T07:48:04.695599848Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:04.698795 env[1727]: time="2024-07-02T07:48:04.698748396Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:04.701194 env[1727]: time="2024-07-02T07:48:04.701152299Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:04.703592 env[1727]: time="2024-07-02T07:48:04.703549078Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:04.704358 env[1727]: time="2024-07-02T07:48:04.704293029Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d\"" Jul 2 07:48:04.707663 env[1727]: time="2024-07-02T07:48:04.707627137Z" level=info msg="CreateContainer within sandbox \"d782ef58bde8c75ffe7d21dd725f39c2fdd9acd59243727d5d08c9312481d6e9\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 07:48:04.726398 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3263135156.mount: Deactivated successfully. Jul 2 07:48:04.737544 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2862695541.mount: Deactivated successfully. Jul 2 07:48:04.744422 env[1727]: time="2024-07-02T07:48:04.744372973Z" level=info msg="CreateContainer within sandbox \"d782ef58bde8c75ffe7d21dd725f39c2fdd9acd59243727d5d08c9312481d6e9\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"03cad1ddfce7ac1d7cfd87184410395d780d4ff478207a0c88aee7c6d5080b50\"" Jul 2 07:48:04.746922 env[1727]: time="2024-07-02T07:48:04.745384039Z" level=info msg="StartContainer for \"03cad1ddfce7ac1d7cfd87184410395d780d4ff478207a0c88aee7c6d5080b50\"" Jul 2 07:48:04.774688 systemd[1]: Started cri-containerd-03cad1ddfce7ac1d7cfd87184410395d780d4ff478207a0c88aee7c6d5080b50.scope. Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit: BPF prog-id=117 op=LOAD Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2918 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:04.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033636164316464666365376163316437636664383731383434313033 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2918 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:04.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033636164316464666365376163316437636664383731383434313033 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit: BPF prog-id=118 op=LOAD Jul 2 07:48:04.805000 audit[3113]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00039ed20 items=0 ppid=2918 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:04.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033636164316464666365376163316437636664383731383434313033 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.805000 audit: BPF prog-id=119 op=LOAD Jul 2 07:48:04.805000 audit[3113]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00039ed68 items=0 ppid=2918 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:04.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033636164316464666365376163316437636664383731383434313033 Jul 2 07:48:04.806000 audit: BPF prog-id=119 op=UNLOAD Jul 2 07:48:04.806000 audit: BPF prog-id=118 op=UNLOAD Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { perfmon } for pid=3113 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit[3113]: AVC avc: denied { bpf } for pid=3113 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:04.806000 audit: BPF prog-id=120 op=LOAD Jul 2 07:48:04.806000 audit[3113]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039f178 items=0 ppid=2918 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:04.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033636164316464666365376163316437636664383731383434313033 Jul 2 07:48:04.841351 env[1727]: time="2024-07-02T07:48:04.841282112Z" level=info msg="StartContainer for \"03cad1ddfce7ac1d7cfd87184410395d780d4ff478207a0c88aee7c6d5080b50\" returns successfully" Jul 2 07:48:04.911345 kubelet[2790]: I0702 07:48:04.911299 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-rb5bg" podStartSLOduration=3.911247434 podStartE2EDuration="3.911247434s" podCreationTimestamp="2024-07-02 07:48:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:48:03.320998557 +0000 UTC m=+14.412211743" watchObservedRunningTime="2024-07-02 07:48:04.911247434 +0000 UTC m=+16.002460621" Jul 2 07:48:07.961000 audit[3146]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.962743 kernel: kauditd_printk_skb: 360 callbacks suppressed Jul 2 07:48:07.962814 kernel: audit: type=1325 audit(1719906487.961:935): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.961000 audit[3146]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd81bffd20 a2=0 a3=7ffd81bffd0c items=0 ppid=2964 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.970203 kernel: audit: type=1300 audit(1719906487.961:935): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd81bffd20 a2=0 a3=7ffd81bffd0c items=0 ppid=2964 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.961000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:07.973352 kernel: audit: type=1327 audit(1719906487.961:935): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:07.961000 audit[3146]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.977573 kernel: audit: type=1325 audit(1719906487.961:936): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3146 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.961000 audit[3146]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd81bffd20 a2=0 a3=0 items=0 ppid=2964 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.983359 kernel: audit: type=1300 audit(1719906487.961:936): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd81bffd20 a2=0 a3=0 items=0 ppid=2964 pid=3146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.961000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:07.992436 kernel: audit: type=1327 audit(1719906487.961:936): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:07.992583 kernel: audit: type=1325 audit(1719906487.986:937): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.992626 kernel: audit: type=1300 audit(1719906487.986:937): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe5ac2caf0 a2=0 a3=7ffe5ac2cadc items=0 ppid=2964 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.986000 audit[3148]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.986000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe5ac2caf0 a2=0 a3=7ffe5ac2cadc items=0 ppid=2964 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.998397 kernel: audit: type=1327 audit(1719906487.986:937): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:07.986000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:07.986000 audit[3148]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:08.002971 kernel: audit: type=1325 audit(1719906487.986:938): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:07.986000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe5ac2caf0 a2=0 a3=0 items=0 ppid=2964 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.986000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:08.101513 kubelet[2790]: I0702 07:48:08.101462 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4974c85-cmk4j" podStartSLOduration=4.767455182 podStartE2EDuration="7.1014094s" podCreationTimestamp="2024-07-02 07:48:01 +0000 UTC" firstStartedPulling="2024-07-02 07:48:02.37217751 +0000 UTC m=+13.463390676" lastFinishedPulling="2024-07-02 07:48:04.70613173 +0000 UTC m=+15.797344894" observedRunningTime="2024-07-02 07:48:05.29860396 +0000 UTC m=+16.389817145" watchObservedRunningTime="2024-07-02 07:48:08.1014094 +0000 UTC m=+19.192622615" Jul 2 07:48:08.102073 kubelet[2790]: I0702 07:48:08.101631 2790 topology_manager.go:215] "Topology Admit Handler" podUID="d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f" podNamespace="calico-system" podName="calico-typha-6c8f44b888-hns9g" Jul 2 07:48:08.112726 systemd[1]: Created slice kubepods-besteffort-podd5df2e48_d1cb_45f3_9a6c_33a9f2a4d41f.slice. Jul 2 07:48:08.143692 kubelet[2790]: I0702 07:48:08.143599 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f-tigera-ca-bundle\") pod \"calico-typha-6c8f44b888-hns9g\" (UID: \"d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f\") " pod="calico-system/calico-typha-6c8f44b888-hns9g" Jul 2 07:48:08.143891 kubelet[2790]: I0702 07:48:08.143723 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rgthg\" (UniqueName: \"kubernetes.io/projected/d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f-kube-api-access-rgthg\") pod \"calico-typha-6c8f44b888-hns9g\" (UID: \"d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f\") " pod="calico-system/calico-typha-6c8f44b888-hns9g" Jul 2 07:48:08.143891 kubelet[2790]: I0702 07:48:08.143787 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f-typha-certs\") pod \"calico-typha-6c8f44b888-hns9g\" (UID: \"d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f\") " pod="calico-system/calico-typha-6c8f44b888-hns9g" Jul 2 07:48:08.342485 kubelet[2790]: I0702 07:48:08.342446 2790 topology_manager.go:215] "Topology Admit Handler" podUID="020cff51-16ad-46f1-8aa4-a54b78829ba8" podNamespace="calico-system" podName="calico-node-4kr5n" Jul 2 07:48:08.349575 systemd[1]: Created slice kubepods-besteffort-pod020cff51_16ad_46f1_8aa4_a54b78829ba8.slice. Jul 2 07:48:08.417118 env[1727]: time="2024-07-02T07:48:08.417074402Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6c8f44b888-hns9g,Uid:d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f,Namespace:calico-system,Attempt:0,}" Jul 2 07:48:08.445709 kubelet[2790]: I0702 07:48:08.445671 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-cni-bin-dir\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.445986 kubelet[2790]: I0702 07:48:08.445956 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-cni-net-dir\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.446169 kubelet[2790]: I0702 07:48:08.446141 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-cni-log-dir\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.446353 kubelet[2790]: I0702 07:48:08.446309 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-var-lib-calico\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.446498 kubelet[2790]: I0702 07:48:08.446485 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ksq79\" (UniqueName: \"kubernetes.io/projected/020cff51-16ad-46f1-8aa4-a54b78829ba8-kube-api-access-ksq79\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.446798 env[1727]: time="2024-07-02T07:48:08.446465634Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:08.446798 env[1727]: time="2024-07-02T07:48:08.446780521Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:08.447025 env[1727]: time="2024-07-02T07:48:08.446839187Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:08.447195 kubelet[2790]: I0702 07:48:08.447178 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-policysync\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.447276 env[1727]: time="2024-07-02T07:48:08.447169473Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/44b0310f8203c632207ecf786f0193fc524c099903d2aa589e578d3048f19952 pid=3159 runtime=io.containerd.runc.v2 Jul 2 07:48:08.447422 kubelet[2790]: I0702 07:48:08.447407 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/020cff51-16ad-46f1-8aa4-a54b78829ba8-node-certs\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.447579 kubelet[2790]: I0702 07:48:08.447563 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/020cff51-16ad-46f1-8aa4-a54b78829ba8-tigera-ca-bundle\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.447724 kubelet[2790]: I0702 07:48:08.447711 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-lib-modules\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.447862 kubelet[2790]: I0702 07:48:08.447850 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-var-run-calico\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.448006 kubelet[2790]: I0702 07:48:08.447993 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-xtables-lock\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.448156 kubelet[2790]: I0702 07:48:08.448144 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/020cff51-16ad-46f1-8aa4-a54b78829ba8-flexvol-driver-host\") pod \"calico-node-4kr5n\" (UID: \"020cff51-16ad-46f1-8aa4-a54b78829ba8\") " pod="calico-system/calico-node-4kr5n" Jul 2 07:48:08.481003 systemd[1]: Started cri-containerd-44b0310f8203c632207ecf786f0193fc524c099903d2aa589e578d3048f19952.scope. Jul 2 07:48:08.496986 kubelet[2790]: I0702 07:48:08.496494 2790 topology_manager.go:215] "Topology Admit Handler" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" podNamespace="calico-system" podName="csi-node-driver-l8cbz" Jul 2 07:48:08.496986 kubelet[2790]: E0702 07:48:08.496935 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:08.550201 kubelet[2790]: I0702 07:48:08.550109 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/fbaad28f-53b3-4e7d-956c-6b403ce4e76d-registration-dir\") pod \"csi-node-driver-l8cbz\" (UID: \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\") " pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:08.550746 kubelet[2790]: I0702 07:48:08.550720 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fjll5\" (UniqueName: \"kubernetes.io/projected/fbaad28f-53b3-4e7d-956c-6b403ce4e76d-kube-api-access-fjll5\") pod \"csi-node-driver-l8cbz\" (UID: \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\") " pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:08.550979 kubelet[2790]: I0702 07:48:08.550965 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/fbaad28f-53b3-4e7d-956c-6b403ce4e76d-kubelet-dir\") pod \"csi-node-driver-l8cbz\" (UID: \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\") " pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:08.551355 kubelet[2790]: I0702 07:48:08.551338 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/fbaad28f-53b3-4e7d-956c-6b403ce4e76d-varrun\") pod \"csi-node-driver-l8cbz\" (UID: \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\") " pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:08.551509 kubelet[2790]: I0702 07:48:08.551497 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/fbaad28f-53b3-4e7d-956c-6b403ce4e76d-socket-dir\") pod \"csi-node-driver-l8cbz\" (UID: \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\") " pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:08.564690 kubelet[2790]: E0702 07:48:08.564651 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.564891 kubelet[2790]: W0702 07:48:08.564869 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.565018 kubelet[2790]: E0702 07:48:08.565001 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.567053 kubelet[2790]: E0702 07:48:08.566993 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.567053 kubelet[2790]: W0702 07:48:08.567016 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.567053 kubelet[2790]: E0702 07:48:08.567064 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.567382 kubelet[2790]: E0702 07:48:08.567361 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.567382 kubelet[2790]: W0702 07:48:08.567379 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.567590 kubelet[2790]: E0702 07:48:08.567574 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.567661 kubelet[2790]: W0702 07:48:08.567592 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.567817 kubelet[2790]: E0702 07:48:08.567800 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.567883 kubelet[2790]: W0702 07:48:08.567818 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.568043 kubelet[2790]: E0702 07:48:08.568028 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.568114 kubelet[2790]: W0702 07:48:08.568044 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.568243 kubelet[2790]: E0702 07:48:08.568226 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.568293 kubelet[2790]: W0702 07:48:08.568242 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.568397 kubelet[2790]: E0702 07:48:08.568381 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.568448 kubelet[2790]: E0702 07:48:08.568419 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.568448 kubelet[2790]: E0702 07:48:08.568442 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.568595 kubelet[2790]: E0702 07:48:08.568457 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.568595 kubelet[2790]: E0702 07:48:08.568470 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.568708 kubelet[2790]: E0702 07:48:08.568687 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.568778 kubelet[2790]: W0702 07:48:08.568707 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.568901 kubelet[2790]: E0702 07:48:08.568885 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.568966 kubelet[2790]: W0702 07:48:08.568902 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.569097 kubelet[2790]: E0702 07:48:08.569083 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.569321 kubelet[2790]: W0702 07:48:08.569098 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.569321 kubelet[2790]: E0702 07:48:08.569309 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.569321 kubelet[2790]: W0702 07:48:08.569319 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.569512 kubelet[2790]: E0702 07:48:08.569359 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.569563 kubelet[2790]: E0702 07:48:08.569548 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.569563 kubelet[2790]: W0702 07:48:08.569558 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.569653 kubelet[2790]: E0702 07:48:08.569573 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.573000 audit: BPF prog-id=121 op=LOAD Jul 2 07:48:08.574000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.574000 audit[3170]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3159 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.574000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623033313066383230336336333232303765636637383666303139 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3159 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623033313066383230336336333232303765636637383666303139 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.575000 audit: BPF prog-id=122 op=LOAD Jul 2 07:48:08.575000 audit[3170]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000218810 items=0 ppid=3159 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623033313066383230336336333232303765636637383666303139 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit: BPF prog-id=123 op=LOAD Jul 2 07:48:08.580000 audit[3170]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000218858 items=0 ppid=3159 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623033313066383230336336333232303765636637383666303139 Jul 2 07:48:08.580000 audit: BPF prog-id=123 op=UNLOAD Jul 2 07:48:08.580000 audit: BPF prog-id=122 op=UNLOAD Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { perfmon } for pid=3170 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit[3170]: AVC avc: denied { bpf } for pid=3170 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.580000 audit: BPF prog-id=124 op=LOAD Jul 2 07:48:08.580000 audit[3170]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000218c68 items=0 ppid=3159 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623033313066383230336336333232303765636637383666303139 Jul 2 07:48:08.583208 kubelet[2790]: E0702 07:48:08.578486 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.583208 kubelet[2790]: W0702 07:48:08.578509 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.583208 kubelet[2790]: E0702 07:48:08.578540 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.584402 kubelet[2790]: E0702 07:48:08.584377 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.591388 kubelet[2790]: E0702 07:48:08.584996 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.591875 kubelet[2790]: E0702 07:48:08.591553 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.591875 kubelet[2790]: E0702 07:48:08.591696 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.591875 kubelet[2790]: W0702 07:48:08.591708 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.591875 kubelet[2790]: E0702 07:48:08.591730 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.599491 kubelet[2790]: E0702 07:48:08.593927 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.599726 kubelet[2790]: W0702 07:48:08.599696 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.599849 kubelet[2790]: E0702 07:48:08.599836 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.600314 kubelet[2790]: E0702 07:48:08.600297 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.600474 kubelet[2790]: W0702 07:48:08.600459 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.600579 kubelet[2790]: E0702 07:48:08.600567 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.600934 kubelet[2790]: E0702 07:48:08.600921 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.601030 kubelet[2790]: W0702 07:48:08.601017 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.601116 kubelet[2790]: E0702 07:48:08.601107 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.601454 kubelet[2790]: E0702 07:48:08.601440 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.601569 kubelet[2790]: W0702 07:48:08.601556 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.601665 kubelet[2790]: E0702 07:48:08.601655 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.602115 kubelet[2790]: E0702 07:48:08.602101 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.602213 kubelet[2790]: W0702 07:48:08.602199 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.602301 kubelet[2790]: E0702 07:48:08.602292 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.602763 kubelet[2790]: E0702 07:48:08.602749 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.602871 kubelet[2790]: W0702 07:48:08.602856 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.602960 kubelet[2790]: E0702 07:48:08.602948 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.603249 kubelet[2790]: E0702 07:48:08.603237 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.603377 kubelet[2790]: W0702 07:48:08.603363 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.603466 kubelet[2790]: E0702 07:48:08.603456 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.603809 kubelet[2790]: E0702 07:48:08.603795 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.603944 kubelet[2790]: W0702 07:48:08.603930 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.604038 kubelet[2790]: E0702 07:48:08.604028 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.604375 kubelet[2790]: E0702 07:48:08.604361 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.604487 kubelet[2790]: W0702 07:48:08.604472 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.604602 kubelet[2790]: E0702 07:48:08.604590 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.605954 kubelet[2790]: E0702 07:48:08.605940 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.606071 kubelet[2790]: W0702 07:48:08.606056 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.606165 kubelet[2790]: E0702 07:48:08.606154 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.606653 kubelet[2790]: E0702 07:48:08.606638 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.606756 kubelet[2790]: W0702 07:48:08.606742 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.606850 kubelet[2790]: E0702 07:48:08.606838 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.655363 env[1727]: time="2024-07-02T07:48:08.653878519Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-4kr5n,Uid:020cff51-16ad-46f1-8aa4-a54b78829ba8,Namespace:calico-system,Attempt:0,}" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.654367 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.655546 kubelet[2790]: W0702 07:48:08.654386 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.654413 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.654691 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.655546 kubelet[2790]: W0702 07:48:08.654701 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.654717 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.654923 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.655546 kubelet[2790]: W0702 07:48:08.654931 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.654946 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.655546 kubelet[2790]: E0702 07:48:08.655131 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.656110 kubelet[2790]: W0702 07:48:08.655138 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.656110 kubelet[2790]: E0702 07:48:08.655152 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.656110 kubelet[2790]: E0702 07:48:08.655373 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.656110 kubelet[2790]: W0702 07:48:08.655383 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.656110 kubelet[2790]: E0702 07:48:08.655398 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.656110 kubelet[2790]: E0702 07:48:08.655628 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.656110 kubelet[2790]: W0702 07:48:08.655637 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.656110 kubelet[2790]: E0702 07:48:08.655652 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.656110 kubelet[2790]: E0702 07:48:08.655821 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.656110 kubelet[2790]: W0702 07:48:08.655830 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.656543 kubelet[2790]: E0702 07:48:08.655845 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.656543 kubelet[2790]: E0702 07:48:08.656103 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.656543 kubelet[2790]: W0702 07:48:08.656113 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.656543 kubelet[2790]: E0702 07:48:08.656129 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.657282 kubelet[2790]: E0702 07:48:08.657267 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.663181 kubelet[2790]: W0702 07:48:08.663147 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.663381 kubelet[2790]: E0702 07:48:08.663351 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.667358 kubelet[2790]: E0702 07:48:08.666134 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.667358 kubelet[2790]: W0702 07:48:08.666158 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.667358 kubelet[2790]: E0702 07:48:08.666202 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.668231 kubelet[2790]: E0702 07:48:08.667980 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.668231 kubelet[2790]: W0702 07:48:08.667998 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.668780 kubelet[2790]: E0702 07:48:08.668757 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.669068 kubelet[2790]: E0702 07:48:08.669055 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.669171 kubelet[2790]: W0702 07:48:08.669157 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.669403 kubelet[2790]: E0702 07:48:08.669380 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.670461 kubelet[2790]: E0702 07:48:08.670439 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.670461 kubelet[2790]: W0702 07:48:08.670456 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.670628 kubelet[2790]: E0702 07:48:08.670612 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.670792 kubelet[2790]: E0702 07:48:08.670777 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.670853 kubelet[2790]: W0702 07:48:08.670793 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.670900 kubelet[2790]: E0702 07:48:08.670889 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.671057 kubelet[2790]: E0702 07:48:08.671044 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.671057 kubelet[2790]: W0702 07:48:08.671056 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.671182 kubelet[2790]: E0702 07:48:08.671148 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.671292 kubelet[2790]: E0702 07:48:08.671277 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.671292 kubelet[2790]: W0702 07:48:08.671292 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.671454 kubelet[2790]: E0702 07:48:08.671409 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.671584 kubelet[2790]: E0702 07:48:08.671568 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.671662 kubelet[2790]: W0702 07:48:08.671584 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.671719 kubelet[2790]: E0702 07:48:08.671674 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.671816 kubelet[2790]: E0702 07:48:08.671801 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.671896 kubelet[2790]: W0702 07:48:08.671815 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.671896 kubelet[2790]: E0702 07:48:08.671834 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.672058 kubelet[2790]: E0702 07:48:08.672044 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.672124 kubelet[2790]: W0702 07:48:08.672064 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.672124 kubelet[2790]: E0702 07:48:08.672083 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.672517 kubelet[2790]: E0702 07:48:08.672374 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.672517 kubelet[2790]: W0702 07:48:08.672387 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.674419 kubelet[2790]: E0702 07:48:08.674395 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.674774 kubelet[2790]: E0702 07:48:08.674618 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.674774 kubelet[2790]: W0702 07:48:08.674632 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.677878 kubelet[2790]: E0702 07:48:08.675428 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.677878 kubelet[2790]: E0702 07:48:08.675600 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.677878 kubelet[2790]: W0702 07:48:08.675612 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.677878 kubelet[2790]: E0702 07:48:08.677401 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.677878 kubelet[2790]: E0702 07:48:08.677587 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.677878 kubelet[2790]: W0702 07:48:08.677598 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.677878 kubelet[2790]: E0702 07:48:08.677829 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.678311 kubelet[2790]: E0702 07:48:08.678014 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.678311 kubelet[2790]: W0702 07:48:08.678024 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.678311 kubelet[2790]: E0702 07:48:08.678044 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.679462 kubelet[2790]: E0702 07:48:08.679417 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.679462 kubelet[2790]: W0702 07:48:08.679432 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.679462 kubelet[2790]: E0702 07:48:08.679451 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.696769 kubelet[2790]: E0702 07:48:08.696741 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:08.696982 kubelet[2790]: W0702 07:48:08.696963 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:08.697116 kubelet[2790]: E0702 07:48:08.697103 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:08.700157 env[1727]: time="2024-07-02T07:48:08.700110200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6c8f44b888-hns9g,Uid:d5df2e48-d1cb-45f3-9a6c-33a9f2a4d41f,Namespace:calico-system,Attempt:0,} returns sandbox id \"44b0310f8203c632207ecf786f0193fc524c099903d2aa589e578d3048f19952\"" Jul 2 07:48:08.702865 env[1727]: time="2024-07-02T07:48:08.702827525Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 07:48:08.709305 env[1727]: time="2024-07-02T07:48:08.708623592Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:08.709305 env[1727]: time="2024-07-02T07:48:08.708724167Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:08.709305 env[1727]: time="2024-07-02T07:48:08.708754920Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:08.709305 env[1727]: time="2024-07-02T07:48:08.708965115Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061 pid=3250 runtime=io.containerd.runc.v2 Jul 2 07:48:08.739514 systemd[1]: Started cri-containerd-56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061.scope. Jul 2 07:48:08.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.777000 audit: BPF prog-id=125 op=LOAD Jul 2 07:48:08.780000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.780000 audit[3263]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=3250 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536616363643238343636396536363039373262306632363165623664 Jul 2 07:48:08.780000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.780000 audit[3263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=3250 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.780000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536616363643238343636396536363039373262306632363165623664 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.781000 audit: BPF prog-id=126 op=LOAD Jul 2 07:48:08.781000 audit[3263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c000212ed0 items=0 ppid=3250 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536616363643238343636396536363039373262306632363165623664 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.782000 audit: BPF prog-id=127 op=LOAD Jul 2 07:48:08.782000 audit[3263]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c000212f18 items=0 ppid=3250 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536616363643238343636396536363039373262306632363165623664 Jul 2 07:48:08.783000 audit: BPF prog-id=127 op=UNLOAD Jul 2 07:48:08.783000 audit: BPF prog-id=126 op=UNLOAD Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { perfmon } for pid=3263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit[3263]: AVC avc: denied { bpf } for pid=3263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.783000 audit: BPF prog-id=128 op=LOAD Jul 2 07:48:08.783000 audit[3263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c000213328 items=0 ppid=3250 pid=3263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536616363643238343636396536363039373262306632363165623664 Jul 2 07:48:08.810297 env[1727]: time="2024-07-02T07:48:08.810253487Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-4kr5n,Uid:020cff51-16ad-46f1-8aa4-a54b78829ba8,Namespace:calico-system,Attempt:0,} returns sandbox id \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\"" Jul 2 07:48:09.016000 audit[3288]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:09.016000 audit[3288]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe7cd65a60 a2=0 a3=7ffe7cd65a4c items=0 ppid=2964 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:09.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:09.018000 audit[3288]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3288 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:09.018000 audit[3288]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe7cd65a60 a2=0 a3=0 items=0 ppid=2964 pid=3288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:09.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:10.181256 kubelet[2790]: E0702 07:48:10.180502 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:11.265996 env[1727]: time="2024-07-02T07:48:11.265954045Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.269234 env[1727]: time="2024-07-02T07:48:11.269177483Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.271879 env[1727]: time="2024-07-02T07:48:11.271819868Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.274193 env[1727]: time="2024-07-02T07:48:11.274133321Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.274669 env[1727]: time="2024-07-02T07:48:11.274627130Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc\"" Jul 2 07:48:11.277920 env[1727]: time="2024-07-02T07:48:11.277879153Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 07:48:11.312678 env[1727]: time="2024-07-02T07:48:11.312400110Z" level=info msg="CreateContainer within sandbox \"44b0310f8203c632207ecf786f0193fc524c099903d2aa589e578d3048f19952\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 07:48:11.333804 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1579088433.mount: Deactivated successfully. Jul 2 07:48:11.344726 env[1727]: time="2024-07-02T07:48:11.344678316Z" level=info msg="CreateContainer within sandbox \"44b0310f8203c632207ecf786f0193fc524c099903d2aa589e578d3048f19952\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"443ef9d43c0b9c50b291e8209f56480312e768b67d6da3d8650df46daaaead8d\"" Jul 2 07:48:11.345981 env[1727]: time="2024-07-02T07:48:11.345944014Z" level=info msg="StartContainer for \"443ef9d43c0b9c50b291e8209f56480312e768b67d6da3d8650df46daaaead8d\"" Jul 2 07:48:11.387047 systemd[1]: Started cri-containerd-443ef9d43c0b9c50b291e8209f56480312e768b67d6da3d8650df46daaaead8d.scope. Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.420000 audit: BPF prog-id=129 op=LOAD Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3159 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434336566396434336330623963353062323931653832303966353634 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3159 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434336566396434336330623963353062323931653832303966353634 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit: BPF prog-id=130 op=LOAD Jul 2 07:48:11.421000 audit[3302]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002113d0 items=0 ppid=3159 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434336566396434336330623963353062323931653832303966353634 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit: BPF prog-id=131 op=LOAD Jul 2 07:48:11.421000 audit[3302]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000211418 items=0 ppid=3159 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434336566396434336330623963353062323931653832303966353634 Jul 2 07:48:11.421000 audit: BPF prog-id=131 op=UNLOAD Jul 2 07:48:11.421000 audit: BPF prog-id=130 op=UNLOAD Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { perfmon } for pid=3302 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit[3302]: AVC avc: denied { bpf } for pid=3302 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.421000 audit: BPF prog-id=132 op=LOAD Jul 2 07:48:11.421000 audit[3302]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000211828 items=0 ppid=3159 pid=3302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434336566396434336330623963353062323931653832303966353634 Jul 2 07:48:11.465220 env[1727]: time="2024-07-02T07:48:11.465180545Z" level=info msg="StartContainer for \"443ef9d43c0b9c50b291e8209f56480312e768b67d6da3d8650df46daaaead8d\" returns successfully" Jul 2 07:48:12.181169 kubelet[2790]: E0702 07:48:12.181135 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:12.326678 kubelet[2790]: I0702 07:48:12.326641 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6c8f44b888-hns9g" podStartSLOduration=1.7535455610000001 podStartE2EDuration="4.326585926s" podCreationTimestamp="2024-07-02 07:48:08 +0000 UTC" firstStartedPulling="2024-07-02 07:48:08.702256044 +0000 UTC m=+19.793469211" lastFinishedPulling="2024-07-02 07:48:11.275296395 +0000 UTC m=+22.366509576" observedRunningTime="2024-07-02 07:48:12.326064609 +0000 UTC m=+23.417277794" watchObservedRunningTime="2024-07-02 07:48:12.326585926 +0000 UTC m=+23.417799111" Jul 2 07:48:12.346203 kubelet[2790]: E0702 07:48:12.346167 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.346203 kubelet[2790]: W0702 07:48:12.346202 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.346484 kubelet[2790]: E0702 07:48:12.346231 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.346542 kubelet[2790]: E0702 07:48:12.346488 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.346542 kubelet[2790]: W0702 07:48:12.346500 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.346542 kubelet[2790]: E0702 07:48:12.346519 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.347362 kubelet[2790]: E0702 07:48:12.347324 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.347362 kubelet[2790]: W0702 07:48:12.347354 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.347533 kubelet[2790]: E0702 07:48:12.347378 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.348187 kubelet[2790]: E0702 07:48:12.347903 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.348187 kubelet[2790]: W0702 07:48:12.347917 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.348187 kubelet[2790]: E0702 07:48:12.347935 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.348927 kubelet[2790]: E0702 07:48:12.348909 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.348927 kubelet[2790]: W0702 07:48:12.348926 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.349089 kubelet[2790]: E0702 07:48:12.348943 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.349174 kubelet[2790]: E0702 07:48:12.349159 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.349256 kubelet[2790]: W0702 07:48:12.349177 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.349256 kubelet[2790]: E0702 07:48:12.349192 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.349427 kubelet[2790]: E0702 07:48:12.349405 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.349427 kubelet[2790]: W0702 07:48:12.349415 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.349531 kubelet[2790]: E0702 07:48:12.349431 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.349648 kubelet[2790]: E0702 07:48:12.349616 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.349728 kubelet[2790]: W0702 07:48:12.349651 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.349728 kubelet[2790]: E0702 07:48:12.349668 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.349962 kubelet[2790]: E0702 07:48:12.349947 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.350046 kubelet[2790]: W0702 07:48:12.349963 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.350046 kubelet[2790]: E0702 07:48:12.349979 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.350179 kubelet[2790]: E0702 07:48:12.350165 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.350256 kubelet[2790]: W0702 07:48:12.350180 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.350256 kubelet[2790]: E0702 07:48:12.350195 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.350422 kubelet[2790]: E0702 07:48:12.350408 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.350500 kubelet[2790]: W0702 07:48:12.350426 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.350500 kubelet[2790]: E0702 07:48:12.350441 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.350639 kubelet[2790]: E0702 07:48:12.350626 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.350714 kubelet[2790]: W0702 07:48:12.350641 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.350714 kubelet[2790]: E0702 07:48:12.350655 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.350886 kubelet[2790]: E0702 07:48:12.350872 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.350967 kubelet[2790]: W0702 07:48:12.350887 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.350967 kubelet[2790]: E0702 07:48:12.350903 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.351101 kubelet[2790]: E0702 07:48:12.351086 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.351175 kubelet[2790]: W0702 07:48:12.351102 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.351175 kubelet[2790]: E0702 07:48:12.351116 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.351316 kubelet[2790]: E0702 07:48:12.351303 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.351399 kubelet[2790]: W0702 07:48:12.351317 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.351399 kubelet[2790]: E0702 07:48:12.351348 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.387873 kubelet[2790]: E0702 07:48:12.387828 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.387873 kubelet[2790]: W0702 07:48:12.387865 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.388142 kubelet[2790]: E0702 07:48:12.387890 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.388228 kubelet[2790]: E0702 07:48:12.388211 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.388308 kubelet[2790]: W0702 07:48:12.388227 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.388308 kubelet[2790]: E0702 07:48:12.388250 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.388672 kubelet[2790]: E0702 07:48:12.388641 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.388672 kubelet[2790]: W0702 07:48:12.388671 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.388809 kubelet[2790]: E0702 07:48:12.388695 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.388996 kubelet[2790]: E0702 07:48:12.388983 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.389086 kubelet[2790]: W0702 07:48:12.389074 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.389159 kubelet[2790]: E0702 07:48:12.389151 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.389523 kubelet[2790]: E0702 07:48:12.389509 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.389637 kubelet[2790]: W0702 07:48:12.389623 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.389744 kubelet[2790]: E0702 07:48:12.389734 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.390088 kubelet[2790]: E0702 07:48:12.390070 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.390197 kubelet[2790]: W0702 07:48:12.390185 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.390301 kubelet[2790]: E0702 07:48:12.390291 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.390724 kubelet[2790]: E0702 07:48:12.390707 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.390846 kubelet[2790]: W0702 07:48:12.390832 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.390955 kubelet[2790]: E0702 07:48:12.390945 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.391474 kubelet[2790]: E0702 07:48:12.391429 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.391614 kubelet[2790]: W0702 07:48:12.391587 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.391686 kubelet[2790]: E0702 07:48:12.391617 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.392569 kubelet[2790]: E0702 07:48:12.392005 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.392569 kubelet[2790]: W0702 07:48:12.392019 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.392569 kubelet[2790]: E0702 07:48:12.392105 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.392569 kubelet[2790]: E0702 07:48:12.392375 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.392569 kubelet[2790]: W0702 07:48:12.392386 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.392919 kubelet[2790]: E0702 07:48:12.392638 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.392919 kubelet[2790]: W0702 07:48:12.392648 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.392919 kubelet[2790]: E0702 07:48:12.392665 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.394180 kubelet[2790]: E0702 07:48:12.394145 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.394449 kubelet[2790]: E0702 07:48:12.394431 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.394449 kubelet[2790]: W0702 07:48:12.394449 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.394576 kubelet[2790]: E0702 07:48:12.394469 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.395027 kubelet[2790]: E0702 07:48:12.394998 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.395027 kubelet[2790]: W0702 07:48:12.395016 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.395177 kubelet[2790]: E0702 07:48:12.395106 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.395281 kubelet[2790]: E0702 07:48:12.395252 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.395281 kubelet[2790]: W0702 07:48:12.395267 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.395438 kubelet[2790]: E0702 07:48:12.395373 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.395756 kubelet[2790]: E0702 07:48:12.395739 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.395756 kubelet[2790]: W0702 07:48:12.395756 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.395873 kubelet[2790]: E0702 07:48:12.395777 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.396039 kubelet[2790]: E0702 07:48:12.396023 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.396099 kubelet[2790]: W0702 07:48:12.396039 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.396099 kubelet[2790]: E0702 07:48:12.396062 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.396719 kubelet[2790]: E0702 07:48:12.396701 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.396719 kubelet[2790]: W0702 07:48:12.396718 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.396852 kubelet[2790]: E0702 07:48:12.396808 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.396974 kubelet[2790]: E0702 07:48:12.396963 2790 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:48:12.397029 kubelet[2790]: W0702 07:48:12.396975 2790 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:48:12.397029 kubelet[2790]: E0702 07:48:12.396992 2790 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:48:12.924673 env[1727]: time="2024-07-02T07:48:12.924621184Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:12.929010 env[1727]: time="2024-07-02T07:48:12.928963064Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:12.932472 env[1727]: time="2024-07-02T07:48:12.932428623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:12.948973 env[1727]: time="2024-07-02T07:48:12.948839415Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:12.955595 env[1727]: time="2024-07-02T07:48:12.955529698Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9\"" Jul 2 07:48:12.959093 env[1727]: time="2024-07-02T07:48:12.959041771Z" level=info msg="CreateContainer within sandbox \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 07:48:12.991440 env[1727]: time="2024-07-02T07:48:12.991399426Z" level=info msg="CreateContainer within sandbox \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934\"" Jul 2 07:48:12.992636 env[1727]: time="2024-07-02T07:48:12.992597888Z" level=info msg="StartContainer for \"bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934\"" Jul 2 07:48:13.019347 systemd[1]: Started cri-containerd-bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934.scope. Jul 2 07:48:13.031439 systemd[1]: run-containerd-runc-k8s.io-bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934-runc.CZo27u.mount: Deactivated successfully. Jul 2 07:48:13.068190 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 2 07:48:13.068369 kernel: audit: type=1400 audit(1719906493.059:995): avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068423 kernel: audit: type=1300 audit(1719906493.059:995): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7ffb64b10a38 items=0 ppid=3250 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7ffb64b10a38 items=0 ppid=3250 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313461626136343563333731646363323133316236336133336236 Jul 2 07:48:13.077103 kernel: audit: type=1327 audit(1719906493.059:995): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313461626136343563333731646363323133316236336133336236 Jul 2 07:48:13.077344 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.084136 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.084194 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.090425 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.095506 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.101794 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit: BPF prog-id=133 op=LOAD Jul 2 07:48:13.106346 kernel: audit: type=1400 audit(1719906493.059:996): avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.059000 audit[3370]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0002d5b98 items=0 ppid=3250 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313461626136343563333731646363323133316236336133336236 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.063000 audit: BPF prog-id=134 op=LOAD Jul 2 07:48:13.063000 audit[3370]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0002d5be8 items=0 ppid=3250 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313461626136343563333731646363323133316236336133336236 Jul 2 07:48:13.068000 audit: BPF prog-id=134 op=UNLOAD Jul 2 07:48:13.068000 audit: BPF prog-id=133 op=UNLOAD Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { perfmon } for pid=3370 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit[3370]: AVC avc: denied { bpf } for pid=3370 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.068000 audit: BPF prog-id=135 op=LOAD Jul 2 07:48:13.068000 audit[3370]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0002d5c78 items=0 ppid=3250 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262313461626136343563333731646363323133316236336133336236 Jul 2 07:48:13.115385 env[1727]: time="2024-07-02T07:48:13.115318950Z" level=info msg="StartContainer for \"bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934\" returns successfully" Jul 2 07:48:13.226173 systemd[1]: cri-containerd-bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934.scope: Deactivated successfully. Jul 2 07:48:13.230000 audit: BPF prog-id=135 op=UNLOAD Jul 2 07:48:13.263670 env[1727]: time="2024-07-02T07:48:13.263609666Z" level=info msg="shim disconnected" id=bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934 Jul 2 07:48:13.264197 env[1727]: time="2024-07-02T07:48:13.264172452Z" level=warning msg="cleaning up after shim disconnected" id=bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934 namespace=k8s.io Jul 2 07:48:13.264315 env[1727]: time="2024-07-02T07:48:13.264297541Z" level=info msg="cleaning up dead shim" Jul 2 07:48:13.275864 env[1727]: time="2024-07-02T07:48:13.275818451Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:48:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3410 runtime=io.containerd.runc.v2\n" Jul 2 07:48:13.287244 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bb14aba645c371dcc2131b63a33b6b7caaf3ea5b31df4e130beb798ec3fe5934-rootfs.mount: Deactivated successfully. Jul 2 07:48:13.319166 kubelet[2790]: I0702 07:48:13.317744 2790 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 07:48:13.320883 env[1727]: time="2024-07-02T07:48:13.320835109Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 07:48:14.181155 kubelet[2790]: E0702 07:48:14.181104 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:14.527526 kubelet[2790]: I0702 07:48:14.527486 2790 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 07:48:14.636000 audit[3428]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3428 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:14.636000 audit[3428]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd5dc0baa0 a2=0 a3=7ffd5dc0ba8c items=0 ppid=2964 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:14.636000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:14.638000 audit[3428]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3428 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:14.638000 audit[3428]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd5dc0baa0 a2=0 a3=7ffd5dc0ba8c items=0 ppid=2964 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:14.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:16.180455 kubelet[2790]: E0702 07:48:16.180403 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:18.182717 kubelet[2790]: E0702 07:48:18.182675 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:18.849983 env[1727]: time="2024-07-02T07:48:18.849933170Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:18.852776 env[1727]: time="2024-07-02T07:48:18.852732549Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:18.855476 env[1727]: time="2024-07-02T07:48:18.855432060Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:18.858072 env[1727]: time="2024-07-02T07:48:18.858034153Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:18.858692 env[1727]: time="2024-07-02T07:48:18.858653028Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7\"" Jul 2 07:48:18.861493 env[1727]: time="2024-07-02T07:48:18.861455589Z" level=info msg="CreateContainer within sandbox \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 07:48:18.890760 env[1727]: time="2024-07-02T07:48:18.890640024Z" level=info msg="CreateContainer within sandbox \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580\"" Jul 2 07:48:18.900712 env[1727]: time="2024-07-02T07:48:18.900671650Z" level=info msg="StartContainer for \"e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580\"" Jul 2 07:48:18.938030 systemd[1]: run-containerd-runc-k8s.io-e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580-runc.ANvELC.mount: Deactivated successfully. Jul 2 07:48:18.957537 systemd[1]: Started cri-containerd-e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580.scope. Jul 2 07:48:18.986644 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 2 07:48:18.986789 kernel: audit: type=1400 audit(1719906498.980:1004): avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.980000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.980000 audit[3437]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fb0d6b8f3d8 items=0 ppid=3250 pid=3437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:18.992292 kernel: audit: type=1300 audit(1719906498.980:1004): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fb0d6b8f3d8 items=0 ppid=3250 pid=3437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:18.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533343865346330373932663937383735323366643336643633323830 Jul 2 07:48:18.998359 kernel: audit: type=1327 audit(1719906498.980:1004): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533343865346330373932663937383735323366643336643633323830 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.007954 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.008091 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.017241 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.017401 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.022382 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.032548 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:19.032660 kernel: audit: type=1400 audit(1719906498.981:1005): avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit: BPF prog-id=136 op=LOAD Jul 2 07:48:18.981000 audit[3437]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002bff08 items=0 ppid=3250 pid=3437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533343865346330373932663937383735323366643336643633323830 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit: BPF prog-id=137 op=LOAD Jul 2 07:48:18.981000 audit[3437]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002bff58 items=0 ppid=3250 pid=3437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533343865346330373932663937383735323366643336643633323830 Jul 2 07:48:18.981000 audit: BPF prog-id=137 op=UNLOAD Jul 2 07:48:18.981000 audit: BPF prog-id=136 op=UNLOAD Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { perfmon } for pid=3437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit[3437]: AVC avc: denied { bpf } for pid=3437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:18.981000 audit: BPF prog-id=138 op=LOAD Jul 2 07:48:18.981000 audit[3437]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002bffe8 items=0 ppid=3250 pid=3437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533343865346330373932663937383735323366643336643633323830 Jul 2 07:48:19.036343 env[1727]: time="2024-07-02T07:48:19.036283200Z" level=info msg="StartContainer for \"e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580\" returns successfully" Jul 2 07:48:19.733438 env[1727]: time="2024-07-02T07:48:19.733367785Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:48:19.736707 systemd[1]: cri-containerd-e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580.scope: Deactivated successfully. Jul 2 07:48:19.741000 audit: BPF prog-id=138 op=UNLOAD Jul 2 07:48:19.763688 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580-rootfs.mount: Deactivated successfully. Jul 2 07:48:19.774543 kubelet[2790]: I0702 07:48:19.774512 2790 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Jul 2 07:48:19.802011 kubelet[2790]: I0702 07:48:19.801958 2790 topology_manager.go:215] "Topology Admit Handler" podUID="e88cdb7e-a51d-471a-8707-57d6ce6b0129" podNamespace="kube-system" podName="coredns-76f75df574-frh22" Jul 2 07:48:19.809931 kubelet[2790]: I0702 07:48:19.809518 2790 topology_manager.go:215] "Topology Admit Handler" podUID="f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae" podNamespace="calico-system" podName="calico-kube-controllers-6f548778f6-9cxrv" Jul 2 07:48:19.809698 systemd[1]: Created slice kubepods-burstable-pode88cdb7e_a51d_471a_8707_57d6ce6b0129.slice. Jul 2 07:48:19.820365 kubelet[2790]: I0702 07:48:19.819270 2790 topology_manager.go:215] "Topology Admit Handler" podUID="e3cac349-dcc3-47e5-8455-5444014887eb" podNamespace="kube-system" podName="coredns-76f75df574-z6wbn" Jul 2 07:48:19.831654 systemd[1]: Created slice kubepods-besteffort-podf44f2b4b_be7f_445e_bdbc_40e0bd8e21ae.slice. Jul 2 07:48:19.850935 systemd[1]: Created slice kubepods-burstable-pode3cac349_dcc3_47e5_8455_5444014887eb.slice. Jul 2 07:48:19.858508 kubelet[2790]: I0702 07:48:19.858034 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hnggw\" (UniqueName: \"kubernetes.io/projected/e88cdb7e-a51d-471a-8707-57d6ce6b0129-kube-api-access-hnggw\") pod \"coredns-76f75df574-frh22\" (UID: \"e88cdb7e-a51d-471a-8707-57d6ce6b0129\") " pod="kube-system/coredns-76f75df574-frh22" Jul 2 07:48:19.858508 kubelet[2790]: I0702 07:48:19.858121 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e88cdb7e-a51d-471a-8707-57d6ce6b0129-config-volume\") pod \"coredns-76f75df574-frh22\" (UID: \"e88cdb7e-a51d-471a-8707-57d6ce6b0129\") " pod="kube-system/coredns-76f75df574-frh22" Jul 2 07:48:19.858508 kubelet[2790]: I0702 07:48:19.858187 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae-tigera-ca-bundle\") pod \"calico-kube-controllers-6f548778f6-9cxrv\" (UID: \"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae\") " pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" Jul 2 07:48:19.858508 kubelet[2790]: I0702 07:48:19.858256 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2v852\" (UniqueName: \"kubernetes.io/projected/f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae-kube-api-access-2v852\") pod \"calico-kube-controllers-6f548778f6-9cxrv\" (UID: \"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae\") " pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" Jul 2 07:48:19.858508 kubelet[2790]: I0702 07:48:19.858410 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e3cac349-dcc3-47e5-8455-5444014887eb-config-volume\") pod \"coredns-76f75df574-z6wbn\" (UID: \"e3cac349-dcc3-47e5-8455-5444014887eb\") " pod="kube-system/coredns-76f75df574-z6wbn" Jul 2 07:48:19.858875 kubelet[2790]: I0702 07:48:19.858465 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v66ts\" (UniqueName: \"kubernetes.io/projected/e3cac349-dcc3-47e5-8455-5444014887eb-kube-api-access-v66ts\") pod \"coredns-76f75df574-z6wbn\" (UID: \"e3cac349-dcc3-47e5-8455-5444014887eb\") " pod="kube-system/coredns-76f75df574-z6wbn" Jul 2 07:48:19.956742 env[1727]: time="2024-07-02T07:48:19.956676291Z" level=info msg="shim disconnected" id=e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580 Jul 2 07:48:19.956742 env[1727]: time="2024-07-02T07:48:19.956734757Z" level=warning msg="cleaning up after shim disconnected" id=e348e4c0792f9787523fd36d63280cdb6312c194b54544f246f23adb85421580 namespace=k8s.io Jul 2 07:48:19.956742 env[1727]: time="2024-07-02T07:48:19.956747058Z" level=info msg="cleaning up dead shim" Jul 2 07:48:19.976136 env[1727]: time="2024-07-02T07:48:19.976083377Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:48:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3477 runtime=io.containerd.runc.v2\n" Jul 2 07:48:20.127568 env[1727]: time="2024-07-02T07:48:20.127158584Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-frh22,Uid:e88cdb7e-a51d-471a-8707-57d6ce6b0129,Namespace:kube-system,Attempt:0,}" Jul 2 07:48:20.139513 env[1727]: time="2024-07-02T07:48:20.139468331Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f548778f6-9cxrv,Uid:f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae,Namespace:calico-system,Attempt:0,}" Jul 2 07:48:20.164188 env[1727]: time="2024-07-02T07:48:20.164143801Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-z6wbn,Uid:e3cac349-dcc3-47e5-8455-5444014887eb,Namespace:kube-system,Attempt:0,}" Jul 2 07:48:20.187866 systemd[1]: Created slice kubepods-besteffort-podfbaad28f_53b3_4e7d_956c_6b403ce4e76d.slice. Jul 2 07:48:20.191227 env[1727]: time="2024-07-02T07:48:20.191174567Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-l8cbz,Uid:fbaad28f-53b3-4e7d-956c-6b403ce4e76d,Namespace:calico-system,Attempt:0,}" Jul 2 07:48:20.350138 env[1727]: time="2024-07-02T07:48:20.350100196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 07:48:20.416985 env[1727]: time="2024-07-02T07:48:20.416551328Z" level=error msg="Failed to destroy network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.417725 env[1727]: time="2024-07-02T07:48:20.417678552Z" level=error msg="encountered an error cleaning up failed sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.417931 env[1727]: time="2024-07-02T07:48:20.417890361Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f548778f6-9cxrv,Uid:f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.419922 kubelet[2790]: E0702 07:48:20.418418 2790 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.419922 kubelet[2790]: E0702 07:48:20.418508 2790 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" Jul 2 07:48:20.419922 kubelet[2790]: E0702 07:48:20.418541 2790 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" Jul 2 07:48:20.420179 kubelet[2790]: E0702 07:48:20.418612 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6f548778f6-9cxrv_calico-system(f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6f548778f6-9cxrv_calico-system(f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" podUID="f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae" Jul 2 07:48:20.431133 env[1727]: time="2024-07-02T07:48:20.431066094Z" level=error msg="Failed to destroy network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.431642 env[1727]: time="2024-07-02T07:48:20.431589755Z" level=error msg="encountered an error cleaning up failed sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.431740 env[1727]: time="2024-07-02T07:48:20.431677300Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-frh22,Uid:e88cdb7e-a51d-471a-8707-57d6ce6b0129,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.435267 kubelet[2790]: E0702 07:48:20.432085 2790 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.435267 kubelet[2790]: E0702 07:48:20.432161 2790 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-frh22" Jul 2 07:48:20.435267 kubelet[2790]: E0702 07:48:20.432223 2790 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-frh22" Jul 2 07:48:20.435769 kubelet[2790]: E0702 07:48:20.432314 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-frh22_kube-system(e88cdb7e-a51d-471a-8707-57d6ce6b0129)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-frh22_kube-system(e88cdb7e-a51d-471a-8707-57d6ce6b0129)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-frh22" podUID="e88cdb7e-a51d-471a-8707-57d6ce6b0129" Jul 2 07:48:20.440637 env[1727]: time="2024-07-02T07:48:20.440580312Z" level=error msg="Failed to destroy network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.441164 env[1727]: time="2024-07-02T07:48:20.441113082Z" level=error msg="encountered an error cleaning up failed sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.441268 env[1727]: time="2024-07-02T07:48:20.441187444Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-z6wbn,Uid:e3cac349-dcc3-47e5-8455-5444014887eb,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.441494 kubelet[2790]: E0702 07:48:20.441467 2790 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.441593 kubelet[2790]: E0702 07:48:20.441530 2790 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-z6wbn" Jul 2 07:48:20.441593 kubelet[2790]: E0702 07:48:20.441560 2790 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-z6wbn" Jul 2 07:48:20.441694 kubelet[2790]: E0702 07:48:20.441624 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-z6wbn_kube-system(e3cac349-dcc3-47e5-8455-5444014887eb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-z6wbn_kube-system(e3cac349-dcc3-47e5-8455-5444014887eb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-z6wbn" podUID="e3cac349-dcc3-47e5-8455-5444014887eb" Jul 2 07:48:20.452823 env[1727]: time="2024-07-02T07:48:20.452754508Z" level=error msg="Failed to destroy network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.453295 env[1727]: time="2024-07-02T07:48:20.453247811Z" level=error msg="encountered an error cleaning up failed sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.453402 env[1727]: time="2024-07-02T07:48:20.453323719Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-l8cbz,Uid:fbaad28f-53b3-4e7d-956c-6b403ce4e76d,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.453638 kubelet[2790]: E0702 07:48:20.453609 2790 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:20.453730 kubelet[2790]: E0702 07:48:20.453701 2790 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:20.453866 kubelet[2790]: E0702 07:48:20.453843 2790 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-l8cbz" Jul 2 07:48:20.455475 kubelet[2790]: E0702 07:48:20.455402 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-l8cbz_calico-system(fbaad28f-53b3-4e7d-956c-6b403ce4e76d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-l8cbz_calico-system(fbaad28f-53b3-4e7d-956c-6b403ce4e76d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:20.987779 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716-shm.mount: Deactivated successfully. Jul 2 07:48:21.350404 kubelet[2790]: I0702 07:48:21.350276 2790 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:21.351704 env[1727]: time="2024-07-02T07:48:21.351569583Z" level=info msg="StopPodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\"" Jul 2 07:48:21.359878 kubelet[2790]: I0702 07:48:21.358076 2790 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:21.360138 env[1727]: time="2024-07-02T07:48:21.359973242Z" level=info msg="StopPodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\"" Jul 2 07:48:21.382359 kubelet[2790]: I0702 07:48:21.380462 2790 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:21.383415 env[1727]: time="2024-07-02T07:48:21.383375142Z" level=info msg="StopPodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\"" Jul 2 07:48:21.400740 kubelet[2790]: I0702 07:48:21.400670 2790 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:21.402135 env[1727]: time="2024-07-02T07:48:21.402095785Z" level=info msg="StopPodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\"" Jul 2 07:48:21.501592 env[1727]: time="2024-07-02T07:48:21.501529901Z" level=error msg="StopPodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" failed" error="failed to destroy network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:21.502356 kubelet[2790]: E0702 07:48:21.502051 2790 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:21.502356 kubelet[2790]: E0702 07:48:21.502174 2790 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7"} Jul 2 07:48:21.502356 kubelet[2790]: E0702 07:48:21.502244 2790 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:48:21.502356 kubelet[2790]: E0702 07:48:21.502281 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fbaad28f-53b3-4e7d-956c-6b403ce4e76d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-l8cbz" podUID="fbaad28f-53b3-4e7d-956c-6b403ce4e76d" Jul 2 07:48:21.521974 env[1727]: time="2024-07-02T07:48:21.521905671Z" level=error msg="StopPodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" failed" error="failed to destroy network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:21.522533 kubelet[2790]: E0702 07:48:21.522438 2790 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:21.522669 kubelet[2790]: E0702 07:48:21.522571 2790 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989"} Jul 2 07:48:21.522669 kubelet[2790]: E0702 07:48:21.522651 2790 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:48:21.522867 kubelet[2790]: E0702 07:48:21.522778 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" podUID="f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae" Jul 2 07:48:21.553467 env[1727]: time="2024-07-02T07:48:21.553398557Z" level=error msg="StopPodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" failed" error="failed to destroy network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:21.553690 kubelet[2790]: E0702 07:48:21.553667 2790 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:21.553790 kubelet[2790]: E0702 07:48:21.553720 2790 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716"} Jul 2 07:48:21.553790 kubelet[2790]: E0702 07:48:21.553770 2790 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e88cdb7e-a51d-471a-8707-57d6ce6b0129\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:48:21.553914 kubelet[2790]: E0702 07:48:21.553807 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e88cdb7e-a51d-471a-8707-57d6ce6b0129\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-frh22" podUID="e88cdb7e-a51d-471a-8707-57d6ce6b0129" Jul 2 07:48:21.560308 env[1727]: time="2024-07-02T07:48:21.560247017Z" level=error msg="StopPodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" failed" error="failed to destroy network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:48:21.560707 kubelet[2790]: E0702 07:48:21.560659 2790 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:21.560828 kubelet[2790]: E0702 07:48:21.560725 2790 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e"} Jul 2 07:48:21.560828 kubelet[2790]: E0702 07:48:21.560778 2790 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e3cac349-dcc3-47e5-8455-5444014887eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:48:21.560828 kubelet[2790]: E0702 07:48:21.560818 2790 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e3cac349-dcc3-47e5-8455-5444014887eb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-z6wbn" podUID="e3cac349-dcc3-47e5-8455-5444014887eb" Jul 2 07:48:27.824162 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1205368889.mount: Deactivated successfully. Jul 2 07:48:27.870972 env[1727]: time="2024-07-02T07:48:27.870920573Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:27.877486 env[1727]: time="2024-07-02T07:48:27.877437976Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:27.880719 env[1727]: time="2024-07-02T07:48:27.880678638Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:27.882322 env[1727]: time="2024-07-02T07:48:27.882284526Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:27.882826 env[1727]: time="2024-07-02T07:48:27.882727526Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49\"" Jul 2 07:48:27.930543 env[1727]: time="2024-07-02T07:48:27.930459031Z" level=info msg="CreateContainer within sandbox \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 07:48:27.953932 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1752497479.mount: Deactivated successfully. Jul 2 07:48:27.959816 env[1727]: time="2024-07-02T07:48:27.959731906Z" level=info msg="CreateContainer within sandbox \"56accd284669e660972b0f261eb6daf7c951833c46ea6ad41a9d2be28e64b061\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0\"" Jul 2 07:48:27.963264 env[1727]: time="2024-07-02T07:48:27.963224940Z" level=info msg="StartContainer for \"1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0\"" Jul 2 07:48:27.983780 systemd[1]: Started cri-containerd-1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0.scope. Jul 2 07:48:28.023229 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 2 07:48:28.023461 kernel: audit: type=1400 audit(1719906508.018:1011): avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fdd58bba118 items=0 ppid=3250 pid=3712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:28.029477 kernel: audit: type=1300 audit(1719906508.018:1011): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fdd58bba118 items=0 ppid=3250 pid=3712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:28.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165666365383634656565373535363961366138626131663532346535 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.038663 kernel: audit: type=1327 audit(1719906508.018:1011): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165666365383634656565373535363961366138626131663532346535 Jul 2 07:48:28.038793 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.042687 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.045942 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.050111 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.054363 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.063300 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.063408 kernel: audit: type=1400 audit(1719906508.018:1012): avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit: BPF prog-id=139 op=LOAD Jul 2 07:48:28.018000 audit[3712]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000385d48 items=0 ppid=3250 pid=3712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:28.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165666365383634656565373535363961366138626131663532346535 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit: BPF prog-id=140 op=LOAD Jul 2 07:48:28.018000 audit[3712]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000385d98 items=0 ppid=3250 pid=3712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:28.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165666365383634656565373535363961366138626131663532346535 Jul 2 07:48:28.018000 audit: BPF prog-id=140 op=UNLOAD Jul 2 07:48:28.018000 audit: BPF prog-id=139 op=UNLOAD Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { perfmon } for pid=3712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit[3712]: AVC avc: denied { bpf } for pid=3712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:28.018000 audit: BPF prog-id=141 op=LOAD Jul 2 07:48:28.018000 audit[3712]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000385e28 items=0 ppid=3250 pid=3712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:28.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165666365383634656565373535363961366138626131663532346535 Jul 2 07:48:28.067546 env[1727]: time="2024-07-02T07:48:28.064914161Z" level=info msg="StartContainer for \"1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0\" returns successfully" Jul 2 07:48:28.182797 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 07:48:28.182997 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 07:48:28.467378 kubelet[2790]: I0702 07:48:28.467338 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-4kr5n" podStartSLOduration=1.390216283 podStartE2EDuration="20.463654956s" podCreationTimestamp="2024-07-02 07:48:08 +0000 UTC" firstStartedPulling="2024-07-02 07:48:08.812179385 +0000 UTC m=+19.903392549" lastFinishedPulling="2024-07-02 07:48:27.885618049 +0000 UTC m=+38.976831222" observedRunningTime="2024-07-02 07:48:28.455348757 +0000 UTC m=+39.546561940" watchObservedRunningTime="2024-07-02 07:48:28.463654956 +0000 UTC m=+39.554868142" Jul 2 07:48:29.502930 systemd[1]: run-containerd-runc-k8s.io-1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0-runc.35eg8F.mount: Deactivated successfully. Jul 2 07:48:29.776000 audit[3842]: AVC avc: denied { write } for pid=3842 comm="tee" name="fd" dev="proc" ino=24449 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.776000 audit[3842]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc0dca8a22 a2=241 a3=1b6 items=1 ppid=3802 pid=3842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.777000 audit[3845]: AVC avc: denied { write } for pid=3845 comm="tee" name="fd" dev="proc" ino=24453 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.777000 audit[3845]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc660a5a24 a2=241 a3=1b6 items=1 ppid=3801 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.777000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 07:48:29.777000 audit: PATH item=0 name="/dev/fd/63" inode=24424 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.776000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 07:48:29.776000 audit: PATH item=0 name="/dev/fd/63" inode=24423 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:29.777000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:29.786000 audit[3849]: AVC avc: denied { write } for pid=3849 comm="tee" name="fd" dev="proc" ino=24459 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.786000 audit[3849]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdf3a0ca13 a2=241 a3=1b6 items=1 ppid=3811 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.786000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 07:48:29.786000 audit: PATH item=0 name="/dev/fd/63" inode=24427 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.786000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:29.805000 audit[3861]: AVC avc: denied { write } for pid=3861 comm="tee" name="fd" dev="proc" ino=24465 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.805000 audit[3861]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc95d07a22 a2=241 a3=1b6 items=1 ppid=3806 pid=3861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.805000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 07:48:29.805000 audit: PATH item=0 name="/dev/fd/63" inode=24448 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.805000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:29.810000 audit[3869]: AVC avc: denied { write } for pid=3869 comm="tee" name="fd" dev="proc" ino=24469 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.831000 audit[3871]: AVC avc: denied { write } for pid=3871 comm="tee" name="fd" dev="proc" ino=24476 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.831000 audit[3871]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd68e0a23 a2=241 a3=1b6 items=1 ppid=3814 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.831000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 07:48:29.831000 audit: PATH item=0 name="/dev/fd/63" inode=24456 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.810000 audit[3869]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff47adea12 a2=241 a3=1b6 items=1 ppid=3809 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.810000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 07:48:29.810000 audit: PATH item=0 name="/dev/fd/63" inode=24455 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.810000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:29.831000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:29.849000 audit[3879]: AVC avc: denied { write } for pid=3879 comm="tee" name="fd" dev="proc" ino=25065 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:29.849000 audit[3879]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe4ecfba22 a2=241 a3=1b6 items=1 ppid=3829 pid=3879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:29.849000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 07:48:29.849000 audit: PATH item=0 name="/dev/fd/63" inode=24473 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:29.849000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:30.340583 (udev-worker)[3747]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:48:30.353833 systemd-networkd[1457]: vxlan.calico: Link UP Jul 2 07:48:30.353848 systemd-networkd[1457]: vxlan.calico: Gained carrier Jul 2 07:48:30.437762 (udev-worker)[3746]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit: BPF prog-id=142 op=LOAD Jul 2 07:48:30.439000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff2469b0e0 a2=70 a3=7fbf17a81000 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.439000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.439000 audit: BPF prog-id=142 op=UNLOAD Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit: BPF prog-id=143 op=LOAD Jul 2 07:48:30.439000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff2469b0e0 a2=70 a3=6f items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.439000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.439000 audit: BPF prog-id=143 op=UNLOAD Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff2469b090 a2=70 a3=7fff2469b0e0 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.439000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.439000 audit: BPF prog-id=144 op=LOAD Jul 2 07:48:30.439000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff2469b070 a2=70 a3=7fff2469b0e0 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.439000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.448000 audit: BPF prog-id=144 op=UNLOAD Jul 2 07:48:30.448000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.448000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff2469b150 a2=70 a3=0 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.448000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.448000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.448000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff2469b140 a2=70 a3=0 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.448000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.448000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.448000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff2469b0b0 a2=70 a3=0 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.448000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff2469b180 a2=70 a3=117ca00 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.449000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff2469b180 a2=70 a3=1179880 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.449000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { perfmon } for pid=3940 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit[3940]: AVC avc: denied { bpf } for pid=3940 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.449000 audit: BPF prog-id=145 op=LOAD Jul 2 07:48:30.449000 audit[3940]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff2469b0a0 a2=70 a3=0 items=0 ppid=3830 pid=3940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.449000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:30.483000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.483000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc78e2580 a2=70 a3=fff80800 items=0 ppid=3830 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.483000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:48:30.483000 audit[3954]: AVC avc: denied { bpf } for pid=3954 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:30.483000 audit[3954]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffc78e2450 a2=70 a3=3 items=0 ppid=3830 pid=3954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.483000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:48:30.505000 audit: BPF prog-id=145 op=UNLOAD Jul 2 07:48:30.610000 audit[3989]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=3989 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:30.610000 audit[3989]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff117529a0 a2=0 a3=7fff1175298c items=0 ppid=3830 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.610000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:30.618000 audit[3988]: NETFILTER_CFG table=raw:98 family=2 entries=19 op=nft_register_chain pid=3988 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:30.618000 audit[3988]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffc24f5ae90 a2=0 a3=7ffc24f5ae7c items=0 ppid=3830 pid=3988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.618000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:30.626000 audit[3990]: NETFILTER_CFG table=nat:99 family=2 entries=15 op=nft_register_chain pid=3990 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:30.626000 audit[3990]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc4083bf60 a2=0 a3=7ffc4083bf4c items=0 ppid=3830 pid=3990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.626000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:30.627000 audit[3991]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:30.627000 audit[3991]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7fff6594bdf0 a2=0 a3=7fff6594bddc items=0 ppid=3830 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:31.527564 systemd-networkd[1457]: vxlan.calico: Gained IPv6LL Jul 2 07:48:32.183351 env[1727]: time="2024-07-02T07:48:32.183292800Z" level=info msg="StopPodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\"" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.266 [INFO][4014] k8s.go 608: Cleaning up netns ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.268 [INFO][4014] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" iface="eth0" netns="/var/run/netns/cni-85aa6db0-b9b2-cb58-b5f5-e90ee74accc5" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.269 [INFO][4014] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" iface="eth0" netns="/var/run/netns/cni-85aa6db0-b9b2-cb58-b5f5-e90ee74accc5" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.269 [INFO][4014] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" iface="eth0" netns="/var/run/netns/cni-85aa6db0-b9b2-cb58-b5f5-e90ee74accc5" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.269 [INFO][4014] k8s.go 615: Releasing IP address(es) ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.269 [INFO][4014] utils.go 188: Calico CNI releasing IP address ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.453 [INFO][4020] ipam_plugin.go 411: Releasing address using handleID ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.454 [INFO][4020] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.455 [INFO][4020] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.463 [WARNING][4020] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.463 [INFO][4020] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.465 [INFO][4020] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:32.469267 env[1727]: 2024-07-02 07:48:32.466 [INFO][4014] k8s.go 621: Teardown processing complete. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:32.473101 systemd[1]: run-netns-cni\x2d85aa6db0\x2db9b2\x2dcb58\x2db5f5\x2de90ee74accc5.mount: Deactivated successfully. Jul 2 07:48:32.475016 env[1727]: time="2024-07-02T07:48:32.474873434Z" level=info msg="TearDown network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" successfully" Jul 2 07:48:32.475016 env[1727]: time="2024-07-02T07:48:32.474919149Z" level=info msg="StopPodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" returns successfully" Jul 2 07:48:32.483825 env[1727]: time="2024-07-02T07:48:32.478430070Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-l8cbz,Uid:fbaad28f-53b3-4e7d-956c-6b403ce4e76d,Namespace:calico-system,Attempt:1,}" Jul 2 07:48:32.653746 systemd-networkd[1457]: cali4e4bff72202: Link UP Jul 2 07:48:32.656991 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:48:32.657106 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4e4bff72202: link becomes ready Jul 2 07:48:32.657262 systemd-networkd[1457]: cali4e4bff72202: Gained carrier Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.558 [INFO][4027] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0 csi-node-driver- calico-system fbaad28f-53b3-4e7d-956c-6b403ce4e76d 688 0 2024-07-02 07:48:08 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7d7f6c786c k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-20-37 csi-node-driver-l8cbz eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali4e4bff72202 [] []}} ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.558 [INFO][4027] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.607 [INFO][4038] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" HandleID="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.618 [INFO][4038] ipam_plugin.go 264: Auto assigning IP ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" HandleID="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00031a300), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-20-37", "pod":"csi-node-driver-l8cbz", "timestamp":"2024-07-02 07:48:32.607730127 +0000 UTC"}, Hostname:"ip-172-31-20-37", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.618 [INFO][4038] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.618 [INFO][4038] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.618 [INFO][4038] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-37' Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.621 [INFO][4038] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.626 [INFO][4038] ipam.go 372: Looking up existing affinities for host host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.630 [INFO][4038] ipam.go 489: Trying affinity for 192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.632 [INFO][4038] ipam.go 155: Attempting to load block cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.634 [INFO][4038] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.634 [INFO][4038] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.127.0/26 handle="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.636 [INFO][4038] ipam.go 1685: Creating new handle: k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6 Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.639 [INFO][4038] ipam.go 1203: Writing block in order to claim IPs block=192.168.127.0/26 handle="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.645 [INFO][4038] ipam.go 1216: Successfully claimed IPs: [192.168.127.1/26] block=192.168.127.0/26 handle="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.645 [INFO][4038] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.127.1/26] handle="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" host="ip-172-31-20-37" Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.645 [INFO][4038] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:32.681384 env[1727]: 2024-07-02 07:48:32.645 [INFO][4038] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.127.1/26] IPv6=[] ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" HandleID="k8s-pod-network.dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.683553 env[1727]: 2024-07-02 07:48:32.649 [INFO][4027] k8s.go 386: Populated endpoint ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fbaad28f-53b3-4e7d-956c-6b403ce4e76d", ResourceVersion:"688", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"", Pod:"csi-node-driver-l8cbz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.127.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali4e4bff72202", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:32.683553 env[1727]: 2024-07-02 07:48:32.649 [INFO][4027] k8s.go 387: Calico CNI using IPs: [192.168.127.1/32] ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.683553 env[1727]: 2024-07-02 07:48:32.649 [INFO][4027] dataplane_linux.go 68: Setting the host side veth name to cali4e4bff72202 ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.683553 env[1727]: 2024-07-02 07:48:32.658 [INFO][4027] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.683553 env[1727]: 2024-07-02 07:48:32.658 [INFO][4027] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fbaad28f-53b3-4e7d-956c-6b403ce4e76d", ResourceVersion:"688", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6", Pod:"csi-node-driver-l8cbz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.127.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali4e4bff72202", MAC:"2e:5f:c8:ff:b4:22", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:32.683553 env[1727]: 2024-07-02 07:48:32.678 [INFO][4027] k8s.go 500: Wrote updated endpoint to datastore ContainerID="dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6" Namespace="calico-system" Pod="csi-node-driver-l8cbz" WorkloadEndpoint="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:32.703000 audit[4060]: NETFILTER_CFG table=filter:101 family=2 entries=34 op=nft_register_chain pid=4060 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:32.703000 audit[4060]: SYSCALL arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7ffc14ad6c60 a2=0 a3=7ffc14ad6c4c items=0 ppid=3830 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:32.703000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:32.712788 env[1727]: time="2024-07-02T07:48:32.712701544Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:32.712788 env[1727]: time="2024-07-02T07:48:32.712753139Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:32.713023 env[1727]: time="2024-07-02T07:48:32.712769494Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:32.713023 env[1727]: time="2024-07-02T07:48:32.712998505Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6 pid=4067 runtime=io.containerd.runc.v2 Jul 2 07:48:32.753973 systemd[1]: run-containerd-runc-k8s.io-dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6-runc.EMbZmb.mount: Deactivated successfully. Jul 2 07:48:32.760900 systemd[1]: Started cri-containerd-dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6.scope. Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.776000 audit: BPF prog-id=146 op=LOAD Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4067 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:32.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316361336331626130623737643061656330626162656236386138 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4067 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:32.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316361336331626130623737643061656330626162656236386138 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.777000 audit: BPF prog-id=147 op=LOAD Jul 2 07:48:32.777000 audit[4076]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000408d10 items=0 ppid=4067 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:32.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316361336331626130623737643061656330626162656236386138 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.778000 audit: BPF prog-id=148 op=LOAD Jul 2 07:48:32.778000 audit[4076]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000408d58 items=0 ppid=4067 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:32.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316361336331626130623737643061656330626162656236386138 Jul 2 07:48:32.779000 audit: BPF prog-id=148 op=UNLOAD Jul 2 07:48:32.779000 audit: BPF prog-id=147 op=UNLOAD Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:32.779000 audit: BPF prog-id=149 op=LOAD Jul 2 07:48:32.779000 audit[4076]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000409168 items=0 ppid=4067 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:32.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463316361336331626130623737643061656330626162656236386138 Jul 2 07:48:32.807011 env[1727]: time="2024-07-02T07:48:32.806971880Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-l8cbz,Uid:fbaad28f-53b3-4e7d-956c-6b403ce4e76d,Namespace:calico-system,Attempt:1,} returns sandbox id \"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6\"" Jul 2 07:48:32.828296 env[1727]: time="2024-07-02T07:48:32.828253937Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 07:48:33.189986 env[1727]: time="2024-07-02T07:48:33.185976016Z" level=info msg="StopPodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\"" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.311 [INFO][4115] k8s.go 608: Cleaning up netns ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.311 [INFO][4115] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" iface="eth0" netns="/var/run/netns/cni-38270a0e-8364-1355-f208-0499e6dd5bb2" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.311 [INFO][4115] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" iface="eth0" netns="/var/run/netns/cni-38270a0e-8364-1355-f208-0499e6dd5bb2" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.312 [INFO][4115] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" iface="eth0" netns="/var/run/netns/cni-38270a0e-8364-1355-f208-0499e6dd5bb2" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.312 [INFO][4115] k8s.go 615: Releasing IP address(es) ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.312 [INFO][4115] utils.go 188: Calico CNI releasing IP address ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.344 [INFO][4121] ipam_plugin.go 411: Releasing address using handleID ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.344 [INFO][4121] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.344 [INFO][4121] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.350 [WARNING][4121] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.351 [INFO][4121] ipam_plugin.go 439: Releasing address using workloadID ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.353 [INFO][4121] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:33.357989 env[1727]: 2024-07-02 07:48:33.356 [INFO][4115] k8s.go 621: Teardown processing complete. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:33.359212 env[1727]: time="2024-07-02T07:48:33.359169767Z" level=info msg="TearDown network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" successfully" Jul 2 07:48:33.359361 env[1727]: time="2024-07-02T07:48:33.359312187Z" level=info msg="StopPodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" returns successfully" Jul 2 07:48:33.360296 env[1727]: time="2024-07-02T07:48:33.360264202Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-frh22,Uid:e88cdb7e-a51d-471a-8707-57d6ce6b0129,Namespace:kube-system,Attempt:1,}" Jul 2 07:48:33.475716 systemd[1]: run-netns-cni\x2d38270a0e\x2d8364\x2d1355\x2df208\x2d0499e6dd5bb2.mount: Deactivated successfully. Jul 2 07:48:33.545780 systemd-networkd[1457]: cali722e29a2284: Link UP Jul 2 07:48:33.548535 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali722e29a2284: link becomes ready Jul 2 07:48:33.547731 systemd-networkd[1457]: cali722e29a2284: Gained carrier Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.439 [INFO][4128] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0 coredns-76f75df574- kube-system e88cdb7e-a51d-471a-8707-57d6ce6b0129 695 0 2024-07-02 07:48:01 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-20-37 coredns-76f75df574-frh22 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali722e29a2284 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.440 [INFO][4128] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.492 [INFO][4139] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" HandleID="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.502 [INFO][4139] ipam_plugin.go 264: Auto assigning IP ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" HandleID="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000116090), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-20-37", "pod":"coredns-76f75df574-frh22", "timestamp":"2024-07-02 07:48:33.492435559 +0000 UTC"}, Hostname:"ip-172-31-20-37", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.502 [INFO][4139] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.503 [INFO][4139] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.503 [INFO][4139] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-37' Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.505 [INFO][4139] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.509 [INFO][4139] ipam.go 372: Looking up existing affinities for host host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.514 [INFO][4139] ipam.go 489: Trying affinity for 192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.517 [INFO][4139] ipam.go 155: Attempting to load block cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.524 [INFO][4139] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.524 [INFO][4139] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.127.0/26 handle="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.528 [INFO][4139] ipam.go 1685: Creating new handle: k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.533 [INFO][4139] ipam.go 1203: Writing block in order to claim IPs block=192.168.127.0/26 handle="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.539 [INFO][4139] ipam.go 1216: Successfully claimed IPs: [192.168.127.2/26] block=192.168.127.0/26 handle="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.539 [INFO][4139] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.127.2/26] handle="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" host="ip-172-31-20-37" Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.539 [INFO][4139] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:33.570437 env[1727]: 2024-07-02 07:48:33.540 [INFO][4139] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.127.2/26] IPv6=[] ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" HandleID="k8s-pod-network.6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.572204 env[1727]: 2024-07-02 07:48:33.542 [INFO][4128] k8s.go 386: Populated endpoint ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e88cdb7e-a51d-471a-8707-57d6ce6b0129", ResourceVersion:"695", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"", Pod:"coredns-76f75df574-frh22", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali722e29a2284", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:33.572204 env[1727]: 2024-07-02 07:48:33.543 [INFO][4128] k8s.go 387: Calico CNI using IPs: [192.168.127.2/32] ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.572204 env[1727]: 2024-07-02 07:48:33.543 [INFO][4128] dataplane_linux.go 68: Setting the host side veth name to cali722e29a2284 ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.572204 env[1727]: 2024-07-02 07:48:33.548 [INFO][4128] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.572204 env[1727]: 2024-07-02 07:48:33.549 [INFO][4128] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e88cdb7e-a51d-471a-8707-57d6ce6b0129", ResourceVersion:"695", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e", Pod:"coredns-76f75df574-frh22", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali722e29a2284", MAC:"d6:7b:f7:8b:bd:ca", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:33.572204 env[1727]: 2024-07-02 07:48:33.560 [INFO][4128] k8s.go 500: Wrote updated endpoint to datastore ContainerID="6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e" Namespace="kube-system" Pod="coredns-76f75df574-frh22" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:33.599567 env[1727]: time="2024-07-02T07:48:33.598954479Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:33.599567 env[1727]: time="2024-07-02T07:48:33.599004424Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:33.599567 env[1727]: time="2024-07-02T07:48:33.599032661Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:33.599567 env[1727]: time="2024-07-02T07:48:33.599201350Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e pid=4166 runtime=io.containerd.runc.v2 Jul 2 07:48:33.616387 kernel: kauditd_printk_skb: 217 callbacks suppressed Jul 2 07:48:33.616558 kernel: audit: type=1325 audit(1719906513.610:1063): table=filter:102 family=2 entries=38 op=nft_register_chain pid=4171 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:33.616598 kernel: audit: type=1300 audit(1719906513.610:1063): arch=c000003e syscall=46 success=yes exit=20336 a0=3 a1=7ffefcbd90b0 a2=0 a3=7ffefcbd909c items=0 ppid=3830 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.610000 audit[4171]: NETFILTER_CFG table=filter:102 family=2 entries=38 op=nft_register_chain pid=4171 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:33.610000 audit[4171]: SYSCALL arch=c000003e syscall=46 success=yes exit=20336 a0=3 a1=7ffefcbd90b0 a2=0 a3=7ffefcbd909c items=0 ppid=3830 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.610000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:33.624719 kernel: audit: type=1327 audit(1719906513.610:1063): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:33.642709 systemd[1]: run-containerd-runc-k8s.io-6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e-runc.PqzqG0.mount: Deactivated successfully. Jul 2 07:48:33.646632 systemd[1]: Started cri-containerd-6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e.scope. Jul 2 07:48:33.675921 kernel: audit: type=1400 audit(1719906513.665:1064): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676065 kernel: audit: type=1400 audit(1719906513.665:1065): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676100 kernel: audit: type=1400 audit(1719906513.665:1066): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.686542 kernel: audit: type=1400 audit(1719906513.665:1067): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.697876 kernel: audit: type=1400 audit(1719906513.665:1068): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.698016 kernel: audit: type=1400 audit(1719906513.665:1069): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.675000 audit: BPF prog-id=150 op=LOAD Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4166 pid=4176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.703490 kernel: audit: type=1400 audit(1719906513.665:1070): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333665336661363932323136356363333130643463633839396665 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4166 pid=4176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333665336661363932323136356363333130643463633839396665 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit: BPF prog-id=151 op=LOAD Jul 2 07:48:33.676000 audit[4176]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003858b0 items=0 ppid=4166 pid=4176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333665336661363932323136356363333130643463633839396665 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.676000 audit: BPF prog-id=152 op=LOAD Jul 2 07:48:33.676000 audit[4176]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003858f8 items=0 ppid=4166 pid=4176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333665336661363932323136356363333130643463633839396665 Jul 2 07:48:33.677000 audit: BPF prog-id=152 op=UNLOAD Jul 2 07:48:33.677000 audit: BPF prog-id=151 op=UNLOAD Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { perfmon } for pid=4176 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit[4176]: AVC avc: denied { bpf } for pid=4176 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.677000 audit: BPF prog-id=153 op=LOAD Jul 2 07:48:33.677000 audit[4176]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000385d08 items=0 ppid=4166 pid=4176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.677000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661333665336661363932323136356363333130643463633839396665 Jul 2 07:48:33.729874 env[1727]: time="2024-07-02T07:48:33.729775393Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-frh22,Uid:e88cdb7e-a51d-471a-8707-57d6ce6b0129,Namespace:kube-system,Attempt:1,} returns sandbox id \"6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e\"" Jul 2 07:48:33.738615 env[1727]: time="2024-07-02T07:48:33.738568040Z" level=info msg="CreateContainer within sandbox \"6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:48:33.763458 env[1727]: time="2024-07-02T07:48:33.763411402Z" level=info msg="CreateContainer within sandbox \"6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"0c7bd2b3a281c48a25a5f067b1101b1cb2d36db09dda5b37e3403f1a5e3611b2\"" Jul 2 07:48:33.765745 env[1727]: time="2024-07-02T07:48:33.765096855Z" level=info msg="StartContainer for \"0c7bd2b3a281c48a25a5f067b1101b1cb2d36db09dda5b37e3403f1a5e3611b2\"" Jul 2 07:48:33.785311 systemd[1]: Started cri-containerd-0c7bd2b3a281c48a25a5f067b1101b1cb2d36db09dda5b37e3403f1a5e3611b2.scope. Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.810000 audit: BPF prog-id=154 op=LOAD Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4166 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376264326233613238316334386132356135663036376231313031 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4166 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376264326233613238316334386132356135663036376231313031 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit: BPF prog-id=155 op=LOAD Jul 2 07:48:33.811000 audit[4208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00030d990 items=0 ppid=4166 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376264326233613238316334386132356135663036376231313031 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit: BPF prog-id=156 op=LOAD Jul 2 07:48:33.811000 audit[4208]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00030d9d8 items=0 ppid=4166 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376264326233613238316334386132356135663036376231313031 Jul 2 07:48:33.811000 audit: BPF prog-id=156 op=UNLOAD Jul 2 07:48:33.811000 audit: BPF prog-id=155 op=UNLOAD Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:33.811000 audit: BPF prog-id=157 op=LOAD Jul 2 07:48:33.811000 audit[4208]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00030dde8 items=0 ppid=4166 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:33.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063376264326233613238316334386132356135663036376231313031 Jul 2 07:48:33.832712 env[1727]: time="2024-07-02T07:48:33.832657000Z" level=info msg="StartContainer for \"0c7bd2b3a281c48a25a5f067b1101b1cb2d36db09dda5b37e3403f1a5e3611b2\" returns successfully" Jul 2 07:48:34.371505 systemd-networkd[1457]: cali4e4bff72202: Gained IPv6LL Jul 2 07:48:34.467751 kubelet[2790]: I0702 07:48:34.467500 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-frh22" podStartSLOduration=33.466585375 podStartE2EDuration="33.466585375s" podCreationTimestamp="2024-07-02 07:48:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:48:34.466187917 +0000 UTC m=+45.557401102" watchObservedRunningTime="2024-07-02 07:48:34.466585375 +0000 UTC m=+45.557798561" Jul 2 07:48:34.500242 env[1727]: time="2024-07-02T07:48:34.500198051Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:34.505546 env[1727]: time="2024-07-02T07:48:34.505507550Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:34.509740 env[1727]: time="2024-07-02T07:48:34.509701881Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:34.514811 env[1727]: time="2024-07-02T07:48:34.514762824Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:34.516426 env[1727]: time="2024-07-02T07:48:34.516379663Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de\"" Jul 2 07:48:34.524462 env[1727]: time="2024-07-02T07:48:34.524392821Z" level=info msg="CreateContainer within sandbox \"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 07:48:34.558710 env[1727]: time="2024-07-02T07:48:34.558656668Z" level=info msg="CreateContainer within sandbox \"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"da68dfa6ff7f6d0bcca38fe46b458d20e0a4516da6fe768361a28e1a53063901\"" Jul 2 07:48:34.559710 env[1727]: time="2024-07-02T07:48:34.559620246Z" level=info msg="StartContainer for \"da68dfa6ff7f6d0bcca38fe46b458d20e0a4516da6fe768361a28e1a53063901\"" Jul 2 07:48:34.567000 audit[4242]: NETFILTER_CFG table=filter:103 family=2 entries=14 op=nft_register_rule pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:34.567000 audit[4242]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffe42542b50 a2=0 a3=7ffe42542b3c items=0 ppid=2964 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.567000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:34.568000 audit[4242]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:34.568000 audit[4242]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffe42542b50 a2=0 a3=0 items=0 ppid=2964 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:34.608707 systemd[1]: Started cri-containerd-da68dfa6ff7f6d0bcca38fe46b458d20e0a4516da6fe768361a28e1a53063901.scope. Jul 2 07:48:34.614000 audit[4262]: NETFILTER_CFG table=filter:105 family=2 entries=11 op=nft_register_rule pid=4262 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:34.614000 audit[4262]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe008edc30 a2=0 a3=7ffe008edc1c items=0 ppid=2964 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.614000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:34.617000 audit[4262]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4262 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:34.617000 audit[4262]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe008edc30 a2=0 a3=7ffe008edc1c items=0 ppid=2964 pid=4262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.617000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=7f47bd366f88 items=0 ppid=4067 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461363864666136666637663664306263636133386665343662343538 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit: BPF prog-id=158 op=LOAD Jul 2 07:48:34.641000 audit[4251]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019f9d8 a2=78 a3=c0001fc6c8 items=0 ppid=4067 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461363864666136666637663664306263636133386665343662343538 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.641000 audit: BPF prog-id=159 op=LOAD Jul 2 07:48:34.641000 audit[4251]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00019f770 a2=78 a3=c0001fc718 items=0 ppid=4067 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.641000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461363864666136666637663664306263636133386665343662343538 Jul 2 07:48:34.642000 audit: BPF prog-id=159 op=UNLOAD Jul 2 07:48:34.642000 audit: BPF prog-id=158 op=UNLOAD Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { perfmon } for pid=4251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit[4251]: AVC avc: denied { bpf } for pid=4251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:34.642000 audit: BPF prog-id=160 op=LOAD Jul 2 07:48:34.642000 audit[4251]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019fc30 a2=78 a3=c0001fc7a8 items=0 ppid=4067 pid=4251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:34.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461363864666136666637663664306263636133386665343662343538 Jul 2 07:48:34.670902 env[1727]: time="2024-07-02T07:48:34.670848078Z" level=info msg="StartContainer for \"da68dfa6ff7f6d0bcca38fe46b458d20e0a4516da6fe768361a28e1a53063901\" returns successfully" Jul 2 07:48:34.673378 env[1727]: time="2024-07-02T07:48:34.672703555Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 07:48:35.183053 env[1727]: time="2024-07-02T07:48:35.183010362Z" level=info msg="StopPodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\"" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.265 [INFO][4294] k8s.go 608: Cleaning up netns ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.265 [INFO][4294] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" iface="eth0" netns="/var/run/netns/cni-5708ef3a-ccfa-b863-c966-d38e11f3ea8a" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.266 [INFO][4294] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" iface="eth0" netns="/var/run/netns/cni-5708ef3a-ccfa-b863-c966-d38e11f3ea8a" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.266 [INFO][4294] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" iface="eth0" netns="/var/run/netns/cni-5708ef3a-ccfa-b863-c966-d38e11f3ea8a" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.266 [INFO][4294] k8s.go 615: Releasing IP address(es) ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.266 [INFO][4294] utils.go 188: Calico CNI releasing IP address ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.311 [INFO][4300] ipam_plugin.go 411: Releasing address using handleID ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.311 [INFO][4300] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.311 [INFO][4300] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.318 [WARNING][4300] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.318 [INFO][4300] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.324 [INFO][4300] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:35.328802 env[1727]: 2024-07-02 07:48:35.326 [INFO][4294] k8s.go 621: Teardown processing complete. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:35.330625 env[1727]: time="2024-07-02T07:48:35.329257853Z" level=info msg="TearDown network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" successfully" Jul 2 07:48:35.330625 env[1727]: time="2024-07-02T07:48:35.329308074Z" level=info msg="StopPodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" returns successfully" Jul 2 07:48:35.330625 env[1727]: time="2024-07-02T07:48:35.330415845Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f548778f6-9cxrv,Uid:f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae,Namespace:calico-system,Attempt:1,}" Jul 2 07:48:35.479424 systemd[1]: run-containerd-runc-k8s.io-da68dfa6ff7f6d0bcca38fe46b458d20e0a4516da6fe768361a28e1a53063901-runc.zjstPs.mount: Deactivated successfully. Jul 2 07:48:35.479557 systemd[1]: run-netns-cni\x2d5708ef3a\x2dccfa\x2db863\x2dc966\x2dd38e11f3ea8a.mount: Deactivated successfully. Jul 2 07:48:35.495456 systemd-networkd[1457]: cali722e29a2284: Gained IPv6LL Jul 2 07:48:35.633728 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:48:35.634148 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali05dfb0aa5bd: link becomes ready Jul 2 07:48:35.634468 systemd-networkd[1457]: cali05dfb0aa5bd: Link UP Jul 2 07:48:35.634741 systemd-networkd[1457]: cali05dfb0aa5bd: Gained carrier Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.408 [INFO][4307] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0 calico-kube-controllers-6f548778f6- calico-system f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae 719 0 2024-07-02 07:48:08 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6f548778f6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-20-37 calico-kube-controllers-6f548778f6-9cxrv eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali05dfb0aa5bd [] []}} ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.409 [INFO][4307] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.503 [INFO][4318] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" HandleID="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.551 [INFO][4318] ipam_plugin.go 264: Auto assigning IP ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" HandleID="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ddde0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-20-37", "pod":"calico-kube-controllers-6f548778f6-9cxrv", "timestamp":"2024-07-02 07:48:35.503603386 +0000 UTC"}, Hostname:"ip-172-31-20-37", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.552 [INFO][4318] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.552 [INFO][4318] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.552 [INFO][4318] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-37' Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.555 [INFO][4318] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.587 [INFO][4318] ipam.go 372: Looking up existing affinities for host host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.595 [INFO][4318] ipam.go 489: Trying affinity for 192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.598 [INFO][4318] ipam.go 155: Attempting to load block cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.602 [INFO][4318] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.602 [INFO][4318] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.127.0/26 handle="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.606 [INFO][4318] ipam.go 1685: Creating new handle: k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.611 [INFO][4318] ipam.go 1203: Writing block in order to claim IPs block=192.168.127.0/26 handle="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.621 [INFO][4318] ipam.go 1216: Successfully claimed IPs: [192.168.127.3/26] block=192.168.127.0/26 handle="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.621 [INFO][4318] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.127.3/26] handle="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" host="ip-172-31-20-37" Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.622 [INFO][4318] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:35.674472 env[1727]: 2024-07-02 07:48:35.622 [INFO][4318] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.127.3/26] IPv6=[] ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" HandleID="k8s-pod-network.892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.676071 env[1727]: 2024-07-02 07:48:35.627 [INFO][4307] k8s.go 386: Populated endpoint ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0", GenerateName:"calico-kube-controllers-6f548778f6-", Namespace:"calico-system", SelfLink:"", UID:"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f548778f6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"", Pod:"calico-kube-controllers-6f548778f6-9cxrv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.127.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali05dfb0aa5bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:35.676071 env[1727]: 2024-07-02 07:48:35.627 [INFO][4307] k8s.go 387: Calico CNI using IPs: [192.168.127.3/32] ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.676071 env[1727]: 2024-07-02 07:48:35.627 [INFO][4307] dataplane_linux.go 68: Setting the host side veth name to cali05dfb0aa5bd ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.676071 env[1727]: 2024-07-02 07:48:35.636 [INFO][4307] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.676071 env[1727]: 2024-07-02 07:48:35.643 [INFO][4307] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0", GenerateName:"calico-kube-controllers-6f548778f6-", Namespace:"calico-system", SelfLink:"", UID:"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae", ResourceVersion:"719", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f548778f6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb", Pod:"calico-kube-controllers-6f548778f6-9cxrv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.127.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali05dfb0aa5bd", MAC:"d6:7e:e1:85:0d:d5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:35.676071 env[1727]: 2024-07-02 07:48:35.667 [INFO][4307] k8s.go 500: Wrote updated endpoint to datastore ContainerID="892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb" Namespace="calico-system" Pod="calico-kube-controllers-6f548778f6-9cxrv" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:35.704284 env[1727]: time="2024-07-02T07:48:35.704203908Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:35.704470 env[1727]: time="2024-07-02T07:48:35.704396835Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:35.704470 env[1727]: time="2024-07-02T07:48:35.704451411Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:35.704721 env[1727]: time="2024-07-02T07:48:35.704663109Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb pid=4347 runtime=io.containerd.runc.v2 Jul 2 07:48:35.743519 systemd[1]: Started cri-containerd-892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb.scope. Jul 2 07:48:35.755000 audit[4371]: NETFILTER_CFG table=filter:107 family=2 entries=38 op=nft_register_chain pid=4371 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:35.755000 audit[4371]: SYSCALL arch=c000003e syscall=46 success=yes exit=19828 a0=3 a1=7ffc7ff667a0 a2=0 a3=7ffc7ff6678c items=0 ppid=3830 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.755000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.763000 audit: BPF prog-id=161 op=LOAD Jul 2 07:48:35.764000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.764000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4347 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323438386136626232333463613363666532313534656561343264 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4347 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323438386136626232333463613363666532313534656561343264 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit: BPF prog-id=162 op=LOAD Jul 2 07:48:35.765000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ba020 items=0 ppid=4347 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323438386136626232333463613363666532313534656561343264 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit: BPF prog-id=163 op=LOAD Jul 2 07:48:35.765000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ba068 items=0 ppid=4347 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323438386136626232333463613363666532313534656561343264 Jul 2 07:48:35.765000 audit: BPF prog-id=163 op=UNLOAD Jul 2 07:48:35.765000 audit: BPF prog-id=162 op=UNLOAD Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:35.765000 audit: BPF prog-id=164 op=LOAD Jul 2 07:48:35.765000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ba478 items=0 ppid=4347 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839323438386136626232333463613363666532313534656561343264 Jul 2 07:48:35.803643 env[1727]: time="2024-07-02T07:48:35.803582700Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6f548778f6-9cxrv,Uid:f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae,Namespace:calico-system,Attempt:1,} returns sandbox id \"892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb\"" Jul 2 07:48:36.185291 env[1727]: time="2024-07-02T07:48:36.181823023Z" level=info msg="StopPodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\"" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.297 [INFO][4399] k8s.go 608: Cleaning up netns ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.298 [INFO][4399] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" iface="eth0" netns="/var/run/netns/cni-b224e5c2-f35f-6ac7-75e0-46ffadc8cc87" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.298 [INFO][4399] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" iface="eth0" netns="/var/run/netns/cni-b224e5c2-f35f-6ac7-75e0-46ffadc8cc87" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.298 [INFO][4399] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" iface="eth0" netns="/var/run/netns/cni-b224e5c2-f35f-6ac7-75e0-46ffadc8cc87" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.299 [INFO][4399] k8s.go 615: Releasing IP address(es) ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.299 [INFO][4399] utils.go 188: Calico CNI releasing IP address ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.346 [INFO][4405] ipam_plugin.go 411: Releasing address using handleID ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.346 [INFO][4405] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.347 [INFO][4405] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.356 [WARNING][4405] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.356 [INFO][4405] ipam_plugin.go 439: Releasing address using workloadID ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.358 [INFO][4405] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:36.363997 env[1727]: 2024-07-02 07:48:36.361 [INFO][4399] k8s.go 621: Teardown processing complete. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:36.374950 env[1727]: time="2024-07-02T07:48:36.364273921Z" level=info msg="TearDown network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" successfully" Jul 2 07:48:36.374950 env[1727]: time="2024-07-02T07:48:36.364503362Z" level=info msg="StopPodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" returns successfully" Jul 2 07:48:36.374950 env[1727]: time="2024-07-02T07:48:36.365403502Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-z6wbn,Uid:e3cac349-dcc3-47e5-8455-5444014887eb,Namespace:kube-system,Attempt:1,}" Jul 2 07:48:36.372620 systemd[1]: run-netns-cni\x2db224e5c2\x2df35f\x2d6ac7\x2d75e0\x2d46ffadc8cc87.mount: Deactivated successfully. Jul 2 07:48:36.433164 env[1727]: time="2024-07-02T07:48:36.432990456Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:36.438412 env[1727]: time="2024-07-02T07:48:36.436878674Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:36.440380 env[1727]: time="2024-07-02T07:48:36.440343505Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:36.443323 env[1727]: time="2024-07-02T07:48:36.443284533Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:36.444138 env[1727]: time="2024-07-02T07:48:36.443995417Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020\"" Jul 2 07:48:36.458978 env[1727]: time="2024-07-02T07:48:36.456378315Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 07:48:36.466695 env[1727]: time="2024-07-02T07:48:36.463685947Z" level=info msg="CreateContainer within sandbox \"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 07:48:36.510187 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount261331633.mount: Deactivated successfully. Jul 2 07:48:36.519180 env[1727]: time="2024-07-02T07:48:36.519040822Z" level=info msg="CreateContainer within sandbox \"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"c660334d0fc1c9e21b948dbd0bed83f6d5931628c9912a292de57818d8a401cf\"" Jul 2 07:48:36.521814 env[1727]: time="2024-07-02T07:48:36.520286814Z" level=info msg="StartContainer for \"c660334d0fc1c9e21b948dbd0bed83f6d5931628c9912a292de57818d8a401cf\"" Jul 2 07:48:36.589617 systemd[1]: Started cri-containerd-c660334d0fc1c9e21b948dbd0bed83f6d5931628c9912a292de57818d8a401cf.scope. Jul 2 07:48:36.619000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.619000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7fe62b905988 items=0 ppid=4067 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.619000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363033333464306663316339653231623934386462643062656438 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.620000 audit: BPF prog-id=165 op=LOAD Jul 2 07:48:36.620000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c00010b478 items=0 ppid=4067 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.620000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363033333464306663316339653231623934386462643062656438 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.621000 audit: BPF prog-id=166 op=LOAD Jul 2 07:48:36.621000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c00010b4c8 items=0 ppid=4067 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363033333464306663316339653231623934386462643062656438 Jul 2 07:48:36.622000 audit: BPF prog-id=166 op=UNLOAD Jul 2 07:48:36.622000 audit: BPF prog-id=165 op=UNLOAD Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { perfmon } for pid=4437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit[4437]: AVC avc: denied { bpf } for pid=4437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.622000 audit: BPF prog-id=167 op=LOAD Jul 2 07:48:36.622000 audit[4437]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00010b558 items=0 ppid=4067 pid=4437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336363033333464306663316339653231623934386462643062656438 Jul 2 07:48:36.668152 env[1727]: time="2024-07-02T07:48:36.668103799Z" level=info msg="StartContainer for \"c660334d0fc1c9e21b948dbd0bed83f6d5931628c9912a292de57818d8a401cf\" returns successfully" Jul 2 07:48:36.681383 systemd-networkd[1457]: calic0872256ad9: Link UP Jul 2 07:48:36.693367 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:48:36.693483 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic0872256ad9: link becomes ready Jul 2 07:48:36.700407 systemd-networkd[1457]: calic0872256ad9: Gained carrier Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.481 [INFO][4411] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0 coredns-76f75df574- kube-system e3cac349-dcc3-47e5-8455-5444014887eb 728 0 2024-07-02 07:48:01 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-20-37 coredns-76f75df574-z6wbn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calic0872256ad9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.481 [INFO][4411] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.589 [INFO][4426] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" HandleID="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.604 [INFO][4426] ipam_plugin.go 264: Auto assigning IP ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" HandleID="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ee040), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-20-37", "pod":"coredns-76f75df574-z6wbn", "timestamp":"2024-07-02 07:48:36.589431707 +0000 UTC"}, Hostname:"ip-172-31-20-37", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.604 [INFO][4426] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.604 [INFO][4426] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.604 [INFO][4426] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-37' Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.607 [INFO][4426] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.613 [INFO][4426] ipam.go 372: Looking up existing affinities for host host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.628 [INFO][4426] ipam.go 489: Trying affinity for 192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.630 [INFO][4426] ipam.go 155: Attempting to load block cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.634 [INFO][4426] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.634 [INFO][4426] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.127.0/26 handle="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.640 [INFO][4426] ipam.go 1685: Creating new handle: k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.646 [INFO][4426] ipam.go 1203: Writing block in order to claim IPs block=192.168.127.0/26 handle="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.656 [INFO][4426] ipam.go 1216: Successfully claimed IPs: [192.168.127.4/26] block=192.168.127.0/26 handle="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.656 [INFO][4426] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.127.4/26] handle="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" host="ip-172-31-20-37" Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.656 [INFO][4426] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:36.719200 env[1727]: 2024-07-02 07:48:36.657 [INFO][4426] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.127.4/26] IPv6=[] ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" HandleID="k8s-pod-network.46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.720934 env[1727]: 2024-07-02 07:48:36.662 [INFO][4411] k8s.go 386: Populated endpoint ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e3cac349-dcc3-47e5-8455-5444014887eb", ResourceVersion:"728", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"", Pod:"coredns-76f75df574-z6wbn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic0872256ad9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:36.720934 env[1727]: 2024-07-02 07:48:36.663 [INFO][4411] k8s.go 387: Calico CNI using IPs: [192.168.127.4/32] ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.720934 env[1727]: 2024-07-02 07:48:36.663 [INFO][4411] dataplane_linux.go 68: Setting the host side veth name to calic0872256ad9 ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.720934 env[1727]: 2024-07-02 07:48:36.702 [INFO][4411] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.720934 env[1727]: 2024-07-02 07:48:36.702 [INFO][4411] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e3cac349-dcc3-47e5-8455-5444014887eb", ResourceVersion:"728", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f", Pod:"coredns-76f75df574-z6wbn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic0872256ad9", MAC:"9a:4c:c7:37:fa:17", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:36.720934 env[1727]: 2024-07-02 07:48:36.716 [INFO][4411] k8s.go 500: Wrote updated endpoint to datastore ContainerID="46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f" Namespace="kube-system" Pod="coredns-76f75df574-z6wbn" WorkloadEndpoint="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:36.754039 env[1727]: time="2024-07-02T07:48:36.753940185Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:36.754821 env[1727]: time="2024-07-02T07:48:36.754005878Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:36.754821 env[1727]: time="2024-07-02T07:48:36.754040364Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:36.763303 env[1727]: time="2024-07-02T07:48:36.755143676Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f pid=4491 runtime=io.containerd.runc.v2 Jul 2 07:48:36.777500 systemd-networkd[1457]: cali05dfb0aa5bd: Gained IPv6LL Jul 2 07:48:36.808000 audit[4509]: NETFILTER_CFG table=filter:108 family=2 entries=38 op=nft_register_chain pid=4509 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:36.808000 audit[4509]: SYSCALL arch=c000003e syscall=46 success=yes exit=19408 a0=3 a1=7ffe715f28b0 a2=0 a3=7ffe715f289c items=0 ppid=3830 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.808000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:36.817244 systemd[1]: Started cri-containerd-46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f.scope. Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.911000 audit: BPF prog-id=168 op=LOAD Jul 2 07:48:36.912000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.912000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4491 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.912000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436626336643630353763653063666365386162383136366230333765 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4491 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436626336643630353763653063666365386162383136366230333765 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit: BPF prog-id=169 op=LOAD Jul 2 07:48:36.913000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001f6710 items=0 ppid=4491 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436626336643630353763653063666365386162383136366230333765 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit: BPF prog-id=170 op=LOAD Jul 2 07:48:36.913000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001f6758 items=0 ppid=4491 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436626336643630353763653063666365386162383136366230333765 Jul 2 07:48:36.913000 audit: BPF prog-id=170 op=UNLOAD Jul 2 07:48:36.913000 audit: BPF prog-id=169 op=UNLOAD Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { perfmon } for pid=4501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit[4501]: AVC avc: denied { bpf } for pid=4501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:36.913000 audit: BPF prog-id=171 op=LOAD Jul 2 07:48:36.913000 audit[4501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001f6b68 items=0 ppid=4491 pid=4501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:36.913000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436626336643630353763653063666365386162383136366230333765 Jul 2 07:48:36.963688 env[1727]: time="2024-07-02T07:48:36.959786594Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-z6wbn,Uid:e3cac349-dcc3-47e5-8455-5444014887eb,Namespace:kube-system,Attempt:1,} returns sandbox id \"46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f\"" Jul 2 07:48:36.970692 env[1727]: time="2024-07-02T07:48:36.970648803Z" level=info msg="CreateContainer within sandbox \"46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:48:36.990608 env[1727]: time="2024-07-02T07:48:36.990555866Z" level=info msg="CreateContainer within sandbox \"46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"d72acf4c998496fa906bedc804c085feb77c34c380c43f73b89e2ca0dd81bb3d\"" Jul 2 07:48:36.993279 env[1727]: time="2024-07-02T07:48:36.993237263Z" level=info msg="StartContainer for \"d72acf4c998496fa906bedc804c085feb77c34c380c43f73b89e2ca0dd81bb3d\"" Jul 2 07:48:37.017873 systemd[1]: Started cri-containerd-d72acf4c998496fa906bedc804c085feb77c34c380c43f73b89e2ca0dd81bb3d.scope. Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.038000 audit: BPF prog-id=172 op=LOAD Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=4491 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326163663463393938343936666139303662656463383034633038 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=8 items=0 ppid=4491 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326163663463393938343936666139303662656463383034633038 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit: BPF prog-id=173 op=LOAD Jul 2 07:48:37.040000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c000291d00 items=0 ppid=4491 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326163663463393938343936666139303662656463383034633038 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit: BPF prog-id=174 op=LOAD Jul 2 07:48:37.040000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c000291d48 items=0 ppid=4491 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326163663463393938343936666139303662656463383034633038 Jul 2 07:48:37.040000 audit: BPF prog-id=174 op=UNLOAD Jul 2 07:48:37.040000 audit: BPF prog-id=173 op=UNLOAD Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:37.040000 audit: BPF prog-id=175 op=LOAD Jul 2 07:48:37.040000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c00038c158 items=0 ppid=4491 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326163663463393938343936666139303662656463383034633038 Jul 2 07:48:37.072833 env[1727]: time="2024-07-02T07:48:37.072762689Z" level=info msg="StartContainer for \"d72acf4c998496fa906bedc804c085feb77c34c380c43f73b89e2ca0dd81bb3d\" returns successfully" Jul 2 07:48:37.430141 kubelet[2790]: I0702 07:48:37.430027 2790 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 07:48:37.441514 kubelet[2790]: I0702 07:48:37.441195 2790 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 07:48:37.481641 systemd[1]: run-containerd-runc-k8s.io-c660334d0fc1c9e21b948dbd0bed83f6d5931628c9912a292de57818d8a401cf-runc.CgosAs.mount: Deactivated successfully. Jul 2 07:48:37.568002 kubelet[2790]: I0702 07:48:37.567940 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-l8cbz" podStartSLOduration=25.948292525 podStartE2EDuration="29.567883699s" podCreationTimestamp="2024-07-02 07:48:08 +0000 UTC" firstStartedPulling="2024-07-02 07:48:32.824964554 +0000 UTC m=+43.916177716" lastFinishedPulling="2024-07-02 07:48:36.444555728 +0000 UTC m=+47.535768890" observedRunningTime="2024-07-02 07:48:37.535420774 +0000 UTC m=+48.626633958" watchObservedRunningTime="2024-07-02 07:48:37.567883699 +0000 UTC m=+48.659096884" Jul 2 07:48:37.568230 kubelet[2790]: I0702 07:48:37.568186 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-z6wbn" podStartSLOduration=36.568151869 podStartE2EDuration="36.568151869s" podCreationTimestamp="2024-07-02 07:48:01 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:48:37.558637588 +0000 UTC m=+48.649850773" watchObservedRunningTime="2024-07-02 07:48:37.568151869 +0000 UTC m=+48.659365056" Jul 2 07:48:37.590000 audit[4564]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.590000 audit[4564]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fff64be20a0 a2=0 a3=7fff64be208c items=0 ppid=2964 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.592000 audit[4564]: NETFILTER_CFG table=nat:110 family=2 entries=44 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.592000 audit[4564]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff64be20a0 a2=0 a3=7fff64be208c items=0 ppid=2964 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.592000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.602000 audit[4566]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.602000 audit[4566]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fff2da161f0 a2=0 a3=7fff2da161dc items=0 ppid=2964 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.602000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.613000 audit[4566]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.613000 audit[4566]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fff2da161f0 a2=0 a3=7fff2da161dc items=0 ppid=2964 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.613000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:38.310822 systemd-networkd[1457]: calic0872256ad9: Gained IPv6LL Jul 2 07:48:39.728651 env[1727]: time="2024-07-02T07:48:39.728606865Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:39.733651 env[1727]: time="2024-07-02T07:48:39.733616624Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:39.736831 env[1727]: time="2024-07-02T07:48:39.736801242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:39.740618 env[1727]: time="2024-07-02T07:48:39.740578736Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:39.741684 env[1727]: time="2024-07-02T07:48:39.741637122Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783\"" Jul 2 07:48:39.776684 env[1727]: time="2024-07-02T07:48:39.776633399Z" level=info msg="CreateContainer within sandbox \"892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 07:48:39.806279 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1287701730.mount: Deactivated successfully. Jul 2 07:48:39.815314 env[1727]: time="2024-07-02T07:48:39.815253589Z" level=info msg="CreateContainer within sandbox \"892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578\"" Jul 2 07:48:39.816473 env[1727]: time="2024-07-02T07:48:39.816410463Z" level=info msg="StartContainer for \"81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578\"" Jul 2 07:48:39.854130 systemd[1]: Started cri-containerd-81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578.scope. Jul 2 07:48:39.898756 kernel: kauditd_printk_skb: 394 callbacks suppressed Jul 2 07:48:39.898974 kernel: audit: type=1400 audit(1719906519.891:1176): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899137 kernel: audit: type=1400 audit(1719906519.891:1177): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.909803 kernel: audit: type=1400 audit(1719906519.891:1178): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.909938 kernel: audit: type=1400 audit(1719906519.891:1179): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.912615 systemd[1]: Started sshd@7-172.31.20.37:22-139.178.89.65:55650.service. Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.924030 kernel: audit: type=1400 audit(1719906519.891:1180): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.924149 kernel: audit: type=1400 audit(1719906519.891:1181): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.938908 kernel: audit: type=1400 audit(1719906519.891:1182): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.939051 kernel: audit: type=1400 audit(1719906519.891:1183): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.949438 kernel: audit: type=1400 audit(1719906519.891:1184): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.892000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.964356 kernel: audit: type=1400 audit(1719906519.892:1185): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.892000 audit: BPF prog-id=176 op=LOAD Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4347 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:39.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663435353865646437306262666632356530663435663636343866 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4347 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:39.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663435353865646437306262666632356530663435663636343866 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.893000 audit: BPF prog-id=177 op=LOAD Jul 2 07:48:39.893000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e3910 items=0 ppid=4347 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:39.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663435353865646437306262666632356530663435663636343866 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.895000 audit: BPF prog-id=178 op=LOAD Jul 2 07:48:39.895000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e3958 items=0 ppid=4347 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:39.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663435353865646437306262666632356530663435663636343866 Jul 2 07:48:39.898000 audit: BPF prog-id=178 op=UNLOAD Jul 2 07:48:39.898000 audit: BPF prog-id=177 op=UNLOAD Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:39.899000 audit: BPF prog-id=179 op=LOAD Jul 2 07:48:39.899000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e3d68 items=0 ppid=4347 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:39.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831663435353865646437306262666632356530663435663636343866 Jul 2 07:48:39.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.37:22-139.178.89.65:55650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:40.051104 env[1727]: time="2024-07-02T07:48:40.050981760Z" level=info msg="StartContainer for \"81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578\" returns successfully" Jul 2 07:48:40.146000 audit[4598]: USER_ACCT pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:40.148356 sshd[4598]: Accepted publickey for core from 139.178.89.65 port 55650 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:48:40.148000 audit[4598]: CRED_ACQ pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:40.148000 audit[4598]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffafc21920 a2=3 a3=0 items=0 ppid=1 pid=4598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:40.148000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:40.150424 sshd[4598]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:40.160792 systemd-logind[1720]: New session 8 of user core. Jul 2 07:48:40.162447 systemd[1]: Started session-8.scope. Jul 2 07:48:40.170000 audit[4598]: USER_START pid=4598 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:40.172000 audit[4609]: CRED_ACQ pid=4609 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:40.563944 kubelet[2790]: I0702 07:48:40.563511 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6f548778f6-9cxrv" podStartSLOduration=28.625400896 podStartE2EDuration="32.563453771s" podCreationTimestamp="2024-07-02 07:48:08 +0000 UTC" firstStartedPulling="2024-07-02 07:48:35.805137676 +0000 UTC m=+46.896350842" lastFinishedPulling="2024-07-02 07:48:39.743190551 +0000 UTC m=+50.834403717" observedRunningTime="2024-07-02 07:48:40.562988486 +0000 UTC m=+51.654201673" watchObservedRunningTime="2024-07-02 07:48:40.563453771 +0000 UTC m=+51.654666960" Jul 2 07:48:40.878480 sshd[4598]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:40.879000 audit[4598]: USER_END pid=4598 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:40.879000 audit[4598]: CRED_DISP pid=4598 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:40.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.20.37:22-139.178.89.65:55650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:40.882398 systemd[1]: sshd@7-172.31.20.37:22-139.178.89.65:55650.service: Deactivated successfully. Jul 2 07:48:40.883473 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 07:48:40.884735 systemd-logind[1720]: Session 8 logged out. Waiting for processes to exit. Jul 2 07:48:40.885840 systemd-logind[1720]: Removed session 8. Jul 2 07:48:42.606000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:42.606000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fae060 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:42.606000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:42.613000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:42.613000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b2f20 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:42.613000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:43.927000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:43.927000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:43.927000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00e5ab4c0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:48:43.927000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:48:43.927000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00eed4030 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:48:43.927000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:48:43.928000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:43.928000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00eed4060 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:48:43.928000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:48:43.930000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:43.930000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00edffd40 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:48:43.930000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:48:43.942000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:43.942000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00eed4720 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:48:43.942000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:48:43.942000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:43.942000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00e697540 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:48:43.942000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:48:45.904821 systemd[1]: Started sshd@8-172.31.20.37:22-139.178.89.65:55654.service. Jul 2 07:48:45.906989 kernel: kauditd_printk_skb: 82 callbacks suppressed Jul 2 07:48:45.907097 kernel: audit: type=1130 audit(1719906525.904:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.37:22-139.178.89.65:55654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:45.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.37:22-139.178.89.65:55654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:46.084000 audit[4651]: USER_ACCT pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.089776 sshd[4651]: Accepted publickey for core from 139.178.89.65 port 55654 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:48:46.089813 sshd[4651]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:46.090504 kernel: audit: type=1101 audit(1719906526.084:1212): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.084000 audit[4651]: CRED_ACQ pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.099486 kernel: audit: type=1103 audit(1719906526.084:1213): pid=4651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.099600 kernel: audit: type=1006 audit(1719906526.084:1214): pid=4651 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 2 07:48:46.084000 audit[4651]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4da8bb70 a2=3 a3=0 items=0 ppid=1 pid=4651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:46.108429 kernel: audit: type=1300 audit(1719906526.084:1214): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4da8bb70 a2=3 a3=0 items=0 ppid=1 pid=4651 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:46.102356 systemd[1]: Started session-9.scope. Jul 2 07:48:46.106419 systemd-logind[1720]: New session 9 of user core. Jul 2 07:48:46.084000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:46.113156 kernel: audit: type=1327 audit(1719906526.084:1214): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:46.133000 audit[4651]: USER_START pid=4651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.156372 kernel: audit: type=1105 audit(1719906526.133:1215): pid=4651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.133000 audit[4653]: CRED_ACQ pid=4653 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.167354 kernel: audit: type=1103 audit(1719906526.133:1216): pid=4653 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.419443 sshd[4651]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:46.421000 audit[4651]: USER_END pid=4651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.421000 audit[4651]: CRED_DISP pid=4651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.428566 systemd[1]: sshd@8-172.31.20.37:22-139.178.89.65:55654.service: Deactivated successfully. Jul 2 07:48:46.429628 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 07:48:46.431828 kernel: audit: type=1106 audit(1719906526.421:1217): pid=4651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.431896 kernel: audit: type=1104 audit(1719906526.421:1218): pid=4651 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:46.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.20.37:22-139.178.89.65:55654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:46.432667 systemd-logind[1720]: Session 9 logged out. Waiting for processes to exit. Jul 2 07:48:46.433703 systemd-logind[1720]: Removed session 9. Jul 2 07:48:47.058793 systemd[1]: run-containerd-runc-k8s.io-1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0-runc.agXZtN.mount: Deactivated successfully. Jul 2 07:48:49.216214 env[1727]: time="2024-07-02T07:48:49.216161753Z" level=info msg="StopPodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\"" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.281 [WARNING][4702] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fbaad28f-53b3-4e7d-956c-6b403ce4e76d", ResourceVersion:"741", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6", Pod:"csi-node-driver-l8cbz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.127.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali4e4bff72202", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.282 [INFO][4702] k8s.go 608: Cleaning up netns ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.283 [INFO][4702] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" iface="eth0" netns="" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.283 [INFO][4702] k8s.go 615: Releasing IP address(es) ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.283 [INFO][4702] utils.go 188: Calico CNI releasing IP address ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.371 [INFO][4708] ipam_plugin.go 411: Releasing address using handleID ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.371 [INFO][4708] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.371 [INFO][4708] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.392 [WARNING][4708] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.392 [INFO][4708] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.393 [INFO][4708] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:49.399135 env[1727]: 2024-07-02 07:48:49.395 [INFO][4702] k8s.go 621: Teardown processing complete. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.399932 env[1727]: time="2024-07-02T07:48:49.399171201Z" level=info msg="TearDown network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" successfully" Jul 2 07:48:49.399932 env[1727]: time="2024-07-02T07:48:49.399208739Z" level=info msg="StopPodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" returns successfully" Jul 2 07:48:49.400322 env[1727]: time="2024-07-02T07:48:49.400282767Z" level=info msg="RemovePodSandbox for \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\"" Jul 2 07:48:49.400457 env[1727]: time="2024-07-02T07:48:49.400339838Z" level=info msg="Forcibly stopping sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\"" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.441 [WARNING][4727] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"fbaad28f-53b3-4e7d-956c-6b403ce4e76d", ResourceVersion:"741", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"dc1ca3c1ba0b77d0aec0babeb68a88b82e665099164359df833e56b01cd4b5a6", Pod:"csi-node-driver-l8cbz", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.127.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali4e4bff72202", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.441 [INFO][4727] k8s.go 608: Cleaning up netns ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.441 [INFO][4727] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" iface="eth0" netns="" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.441 [INFO][4727] k8s.go 615: Releasing IP address(es) ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.441 [INFO][4727] utils.go 188: Calico CNI releasing IP address ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.468 [INFO][4733] ipam_plugin.go 411: Releasing address using handleID ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.468 [INFO][4733] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.468 [INFO][4733] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.477 [WARNING][4733] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.477 [INFO][4733] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" HandleID="k8s-pod-network.2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Workload="ip--172--31--20--37-k8s-csi--node--driver--l8cbz-eth0" Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.478 [INFO][4733] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:49.483160 env[1727]: 2024-07-02 07:48:49.480 [INFO][4727] k8s.go 621: Teardown processing complete. ContainerID="2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7" Jul 2 07:48:49.484069 env[1727]: time="2024-07-02T07:48:49.484017597Z" level=info msg="TearDown network for sandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" successfully" Jul 2 07:48:49.488920 env[1727]: time="2024-07-02T07:48:49.488808457Z" level=info msg="RemovePodSandbox \"2f31f4529cf1eac63ce14391d503dc2c6fce8118760bb6e247061cedcb777df7\" returns successfully" Jul 2 07:48:49.489660 env[1727]: time="2024-07-02T07:48:49.489630993Z" level=info msg="StopPodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\"" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.543 [WARNING][4753] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e88cdb7e-a51d-471a-8707-57d6ce6b0129", ResourceVersion:"705", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e", Pod:"coredns-76f75df574-frh22", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali722e29a2284", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.543 [INFO][4753] k8s.go 608: Cleaning up netns ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.543 [INFO][4753] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" iface="eth0" netns="" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.543 [INFO][4753] k8s.go 615: Releasing IP address(es) ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.543 [INFO][4753] utils.go 188: Calico CNI releasing IP address ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.602 [INFO][4760] ipam_plugin.go 411: Releasing address using handleID ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.602 [INFO][4760] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.604 [INFO][4760] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.611 [WARNING][4760] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.611 [INFO][4760] ipam_plugin.go 439: Releasing address using workloadID ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.613 [INFO][4760] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:49.617484 env[1727]: 2024-07-02 07:48:49.615 [INFO][4753] k8s.go 621: Teardown processing complete. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.618614 env[1727]: time="2024-07-02T07:48:49.617527542Z" level=info msg="TearDown network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" successfully" Jul 2 07:48:49.618614 env[1727]: time="2024-07-02T07:48:49.617564164Z" level=info msg="StopPodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" returns successfully" Jul 2 07:48:49.618812 env[1727]: time="2024-07-02T07:48:49.618779474Z" level=info msg="RemovePodSandbox for \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\"" Jul 2 07:48:49.618877 env[1727]: time="2024-07-02T07:48:49.618833975Z" level=info msg="Forcibly stopping sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\"" Jul 2 07:48:49.678000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:49.678000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524b60 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:49.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:49.680000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:49.680000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524b80 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:49.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:49.681000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:49.681000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b2760 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:49.681000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:49.682000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:49.682000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023b2920 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:48:49.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.664 [WARNING][4781] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e88cdb7e-a51d-471a-8707-57d6ce6b0129", ResourceVersion:"705", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"6a36e3fa6922165cc310d4cc899fe40fa60c30b593e6d7ba6dfe4355aba1e95e", Pod:"coredns-76f75df574-frh22", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali722e29a2284", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.664 [INFO][4781] k8s.go 608: Cleaning up netns ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.664 [INFO][4781] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" iface="eth0" netns="" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.664 [INFO][4781] k8s.go 615: Releasing IP address(es) ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.664 [INFO][4781] utils.go 188: Calico CNI releasing IP address ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.694 [INFO][4788] ipam_plugin.go 411: Releasing address using handleID ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.694 [INFO][4788] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.694 [INFO][4788] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.700 [WARNING][4788] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.700 [INFO][4788] ipam_plugin.go 439: Releasing address using workloadID ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" HandleID="k8s-pod-network.430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--frh22-eth0" Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.704 [INFO][4788] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:49.708110 env[1727]: 2024-07-02 07:48:49.706 [INFO][4781] k8s.go 621: Teardown processing complete. ContainerID="430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716" Jul 2 07:48:49.708805 env[1727]: time="2024-07-02T07:48:49.708756584Z" level=info msg="TearDown network for sandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" successfully" Jul 2 07:48:49.717477 env[1727]: time="2024-07-02T07:48:49.717428078Z" level=info msg="RemovePodSandbox \"430132d830776ade8459b32ebe5a959c362a76fa825fce947f4ec97d63ad7716\" returns successfully" Jul 2 07:48:49.718064 env[1727]: time="2024-07-02T07:48:49.718017405Z" level=info msg="StopPodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\"" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.758 [WARNING][4806] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0", GenerateName:"calico-kube-controllers-6f548778f6-", Namespace:"calico-system", SelfLink:"", UID:"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae", ResourceVersion:"801", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f548778f6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb", Pod:"calico-kube-controllers-6f548778f6-9cxrv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.127.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali05dfb0aa5bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.759 [INFO][4806] k8s.go 608: Cleaning up netns ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.759 [INFO][4806] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" iface="eth0" netns="" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.759 [INFO][4806] k8s.go 615: Releasing IP address(es) ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.759 [INFO][4806] utils.go 188: Calico CNI releasing IP address ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.787 [INFO][4812] ipam_plugin.go 411: Releasing address using handleID ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.787 [INFO][4812] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.788 [INFO][4812] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.794 [WARNING][4812] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.794 [INFO][4812] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.796 [INFO][4812] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:49.800463 env[1727]: 2024-07-02 07:48:49.798 [INFO][4806] k8s.go 621: Teardown processing complete. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.802438 env[1727]: time="2024-07-02T07:48:49.800432162Z" level=info msg="TearDown network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" successfully" Jul 2 07:48:49.802753 env[1727]: time="2024-07-02T07:48:49.802716008Z" level=info msg="StopPodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" returns successfully" Jul 2 07:48:49.803899 env[1727]: time="2024-07-02T07:48:49.803855007Z" level=info msg="RemovePodSandbox for \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\"" Jul 2 07:48:49.803997 env[1727]: time="2024-07-02T07:48:49.803895998Z" level=info msg="Forcibly stopping sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\"" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.857 [WARNING][4831] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0", GenerateName:"calico-kube-controllers-6f548778f6-", Namespace:"calico-system", SelfLink:"", UID:"f44f2b4b-be7f-445e-bdbc-40e0bd8e21ae", ResourceVersion:"801", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6f548778f6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"892488a6bb234ca3cfe2154eea42d3c186b7a2ade99d44dc0e210df7f323dbdb", Pod:"calico-kube-controllers-6f548778f6-9cxrv", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.127.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali05dfb0aa5bd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.857 [INFO][4831] k8s.go 608: Cleaning up netns ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.858 [INFO][4831] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" iface="eth0" netns="" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.858 [INFO][4831] k8s.go 615: Releasing IP address(es) ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.858 [INFO][4831] utils.go 188: Calico CNI releasing IP address ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.906 [INFO][4837] ipam_plugin.go 411: Releasing address using handleID ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.906 [INFO][4837] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.906 [INFO][4837] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.912 [WARNING][4837] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.912 [INFO][4837] ipam_plugin.go 439: Releasing address using workloadID ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" HandleID="k8s-pod-network.2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Workload="ip--172--31--20--37-k8s-calico--kube--controllers--6f548778f6--9cxrv-eth0" Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.920 [INFO][4837] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:49.930652 env[1727]: 2024-07-02 07:48:49.928 [INFO][4831] k8s.go 621: Teardown processing complete. ContainerID="2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989" Jul 2 07:48:49.931523 env[1727]: time="2024-07-02T07:48:49.930701187Z" level=info msg="TearDown network for sandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" successfully" Jul 2 07:48:49.935616 env[1727]: time="2024-07-02T07:48:49.935574536Z" level=info msg="RemovePodSandbox \"2b273ba9f8d573b991629460e90791f7fdc07f2220f70c0074205c6f2f263989\" returns successfully" Jul 2 07:48:49.949908 env[1727]: time="2024-07-02T07:48:49.936407247Z" level=info msg="StopPodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\"" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:49.994 [WARNING][4856] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e3cac349-dcc3-47e5-8455-5444014887eb", ResourceVersion:"747", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f", Pod:"coredns-76f75df574-z6wbn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic0872256ad9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:49.995 [INFO][4856] k8s.go 608: Cleaning up netns ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:49.995 [INFO][4856] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" iface="eth0" netns="" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:49.995 [INFO][4856] k8s.go 615: Releasing IP address(es) ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:49.995 [INFO][4856] utils.go 188: Calico CNI releasing IP address ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.020 [INFO][4862] ipam_plugin.go 411: Releasing address using handleID ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.020 [INFO][4862] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.020 [INFO][4862] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.026 [WARNING][4862] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.027 [INFO][4862] ipam_plugin.go 439: Releasing address using workloadID ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.028 [INFO][4862] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:50.032000 env[1727]: 2024-07-02 07:48:50.030 [INFO][4856] k8s.go 621: Teardown processing complete. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.032758 env[1727]: time="2024-07-02T07:48:50.032039361Z" level=info msg="TearDown network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" successfully" Jul 2 07:48:50.032758 env[1727]: time="2024-07-02T07:48:50.032075798Z" level=info msg="StopPodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" returns successfully" Jul 2 07:48:50.032758 env[1727]: time="2024-07-02T07:48:50.032730999Z" level=info msg="RemovePodSandbox for \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\"" Jul 2 07:48:50.033309 env[1727]: time="2024-07-02T07:48:50.032805907Z" level=info msg="Forcibly stopping sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\"" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.086 [WARNING][4881] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"e3cac349-dcc3-47e5-8455-5444014887eb", ResourceVersion:"747", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"46bc6d6057ce0cfce8ab8166b037e051b429f3fb24fbc4ee60c0f6a8ed857e4f", Pod:"coredns-76f75df574-z6wbn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.127.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calic0872256ad9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.087 [INFO][4881] k8s.go 608: Cleaning up netns ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.087 [INFO][4881] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" iface="eth0" netns="" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.089 [INFO][4881] k8s.go 615: Releasing IP address(es) ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.089 [INFO][4881] utils.go 188: Calico CNI releasing IP address ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.124 [INFO][4887] ipam_plugin.go 411: Releasing address using handleID ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.124 [INFO][4887] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.125 [INFO][4887] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.135 [WARNING][4887] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.135 [INFO][4887] ipam_plugin.go 439: Releasing address using workloadID ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" HandleID="k8s-pod-network.32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Workload="ip--172--31--20--37-k8s-coredns--76f75df574--z6wbn-eth0" Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.137 [INFO][4887] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:50.144272 env[1727]: 2024-07-02 07:48:50.139 [INFO][4881] k8s.go 621: Teardown processing complete. ContainerID="32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e" Jul 2 07:48:50.144985 env[1727]: time="2024-07-02T07:48:50.144277676Z" level=info msg="TearDown network for sandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" successfully" Jul 2 07:48:50.149314 env[1727]: time="2024-07-02T07:48:50.149246919Z" level=info msg="RemovePodSandbox \"32fd99de62a07a741a1abba1c3119b1cfdf714b1ef282e0077161a9a8bb3352e\" returns successfully" Jul 2 07:48:50.170812 systemd[1]: run-containerd-runc-k8s.io-81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578-runc.X4ZFxS.mount: Deactivated successfully. Jul 2 07:48:51.263816 systemd[1]: run-containerd-runc-k8s.io-81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578-runc.kJ5TGY.mount: Deactivated successfully. Jul 2 07:48:51.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.37:22-139.178.89.65:51040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:51.446719 systemd[1]: Started sshd@9-172.31.20.37:22-139.178.89.65:51040.service. Jul 2 07:48:51.448627 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 07:48:51.448740 kernel: audit: type=1130 audit(1719906531.445:1224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.37:22-139.178.89.65:51040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:51.644354 kernel: audit: type=1101 audit(1719906531.637:1225): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.637000 audit[4943]: USER_ACCT pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.644682 sshd[4943]: Accepted publickey for core from 139.178.89.65 port 51040 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:48:51.644000 audit[4943]: CRED_ACQ pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.654291 kernel: audit: type=1103 audit(1719906531.644:1226): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.654420 kernel: audit: type=1006 audit(1719906531.644:1227): pid=4943 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 2 07:48:51.651439 sshd[4943]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:51.644000 audit[4943]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca4bde1c0 a2=3 a3=0 items=0 ppid=1 pid=4943 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:51.644000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:51.662183 kernel: audit: type=1300 audit(1719906531.644:1227): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca4bde1c0 a2=3 a3=0 items=0 ppid=1 pid=4943 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:51.662461 kernel: audit: type=1327 audit(1719906531.644:1227): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:51.666924 systemd[1]: Started session-10.scope. Jul 2 07:48:51.667659 systemd-logind[1720]: New session 10 of user core. Jul 2 07:48:51.673000 audit[4943]: USER_START pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.679000 audit[4945]: CRED_ACQ pid=4945 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.685757 kernel: audit: type=1105 audit(1719906531.673:1228): pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.685874 kernel: audit: type=1103 audit(1719906531.679:1229): pid=4945 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.931968 sshd[4943]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:51.936000 audit[4943]: USER_END pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.951401 kernel: audit: type=1106 audit(1719906531.936:1230): pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.951523 kernel: audit: type=1104 audit(1719906531.938:1231): pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.938000 audit[4943]: CRED_DISP pid=4943 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:51.948860 systemd[1]: sshd@9-172.31.20.37:22-139.178.89.65:51040.service: Deactivated successfully. Jul 2 07:48:51.950413 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 07:48:51.953486 systemd-logind[1720]: Session 10 logged out. Waiting for processes to exit. Jul 2 07:48:51.954788 systemd-logind[1720]: Removed session 10. Jul 2 07:48:51.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.20.37:22-139.178.89.65:51040 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:56.967847 systemd[1]: Started sshd@10-172.31.20.37:22-139.178.89.65:51054.service. Jul 2 07:48:56.977964 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:48:56.978182 kernel: audit: type=1130 audit(1719906536.967:1233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.37:22-139.178.89.65:51054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:56.967000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.37:22-139.178.89.65:51054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:57.157000 audit[4957]: USER_ACCT pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.165144 sshd[4957]: Accepted publickey for core from 139.178.89.65 port 51054 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:48:57.165590 kernel: audit: type=1101 audit(1719906537.157:1234): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.165787 sshd[4957]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:57.163000 audit[4957]: CRED_ACQ pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.187236 kernel: audit: type=1103 audit(1719906537.163:1235): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.190217 systemd[1]: Started session-11.scope. Jul 2 07:48:57.192481 systemd-logind[1720]: New session 11 of user core. Jul 2 07:48:57.201282 kernel: audit: type=1006 audit(1719906537.164:1236): pid=4957 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 2 07:48:57.201427 kernel: audit: type=1300 audit(1719906537.164:1236): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9038b860 a2=3 a3=0 items=0 ppid=1 pid=4957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:57.164000 audit[4957]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9038b860 a2=3 a3=0 items=0 ppid=1 pid=4957 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:57.164000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:57.200000 audit[4957]: USER_START pid=4957 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.212615 kernel: audit: type=1327 audit(1719906537.164:1236): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:57.212757 kernel: audit: type=1105 audit(1719906537.200:1237): pid=4957 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.212790 kernel: audit: type=1103 audit(1719906537.205:1238): pid=4959 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.205000 audit[4959]: CRED_ACQ pid=4959 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.421617 sshd[4957]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:57.421000 audit[4957]: USER_END pid=4957 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.426766 systemd-logind[1720]: Session 11 logged out. Waiting for processes to exit. Jul 2 07:48:57.422000 audit[4957]: CRED_DISP pid=4957 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.429406 systemd[1]: sshd@10-172.31.20.37:22-139.178.89.65:51054.service: Deactivated successfully. Jul 2 07:48:57.430478 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 07:48:57.433999 systemd-logind[1720]: Removed session 11. Jul 2 07:48:57.435554 kernel: audit: type=1106 audit(1719906537.421:1239): pid=4957 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.435640 kernel: audit: type=1104 audit(1719906537.422:1240): pid=4957 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.20.37:22-139.178.89.65:51054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:57.449575 systemd[1]: Started sshd@11-172.31.20.37:22-139.178.89.65:51064.service. Jul 2 07:48:57.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.37:22-139.178.89.65:51064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:57.610000 audit[4969]: USER_ACCT pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.611960 sshd[4969]: Accepted publickey for core from 139.178.89.65 port 51064 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:48:57.611000 audit[4969]: CRED_ACQ pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.612000 audit[4969]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf9be0e60 a2=3 a3=0 items=0 ppid=1 pid=4969 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:57.612000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:57.613890 sshd[4969]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:57.619294 systemd-logind[1720]: New session 12 of user core. Jul 2 07:48:57.619893 systemd[1]: Started session-12.scope. Jul 2 07:48:57.626000 audit[4969]: USER_START pid=4969 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.627000 audit[4971]: CRED_ACQ pid=4971 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.905550 sshd[4969]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:57.905000 audit[4969]: USER_END pid=4969 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.905000 audit[4969]: CRED_DISP pid=4969 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:57.912206 systemd[1]: sshd@11-172.31.20.37:22-139.178.89.65:51064.service: Deactivated successfully. Jul 2 07:48:57.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.20.37:22-139.178.89.65:51064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:57.914067 systemd-logind[1720]: Session 12 logged out. Waiting for processes to exit. Jul 2 07:48:57.914137 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 07:48:57.915955 systemd-logind[1720]: Removed session 12. Jul 2 07:48:57.935434 systemd[1]: Started sshd@12-172.31.20.37:22-139.178.89.65:51074.service. Jul 2 07:48:57.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.37:22-139.178.89.65:51074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:58.123000 audit[4980]: USER_ACCT pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:58.125158 sshd[4980]: Accepted publickey for core from 139.178.89.65 port 51074 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:48:58.125000 audit[4980]: CRED_ACQ pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:58.125000 audit[4980]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff36e8d410 a2=3 a3=0 items=0 ppid=1 pid=4980 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:58.125000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:58.127258 sshd[4980]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:58.135413 systemd-logind[1720]: New session 13 of user core. Jul 2 07:48:58.136314 systemd[1]: Started session-13.scope. Jul 2 07:48:58.143000 audit[4980]: USER_START pid=4980 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:58.145000 audit[4982]: CRED_ACQ pid=4982 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:58.356012 sshd[4980]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:58.356000 audit[4980]: USER_END pid=4980 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:58.357000 audit[4980]: CRED_DISP pid=4980 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:48:58.361002 systemd[1]: sshd@12-172.31.20.37:22-139.178.89.65:51074.service: Deactivated successfully. Jul 2 07:48:58.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.20.37:22-139.178.89.65:51074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:58.363232 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 07:48:58.364323 systemd-logind[1720]: Session 13 logged out. Waiting for processes to exit. Jul 2 07:48:58.365631 systemd-logind[1720]: Removed session 13. Jul 2 07:49:03.382417 systemd[1]: Started sshd@13-172.31.20.37:22-139.178.89.65:34380.service. Jul 2 07:49:03.389616 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 2 07:49:03.389755 kernel: audit: type=1130 audit(1719906543.381:1260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.37:22-139.178.89.65:34380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:03.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.37:22-139.178.89.65:34380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:03.541000 audit[5003]: USER_ACCT pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.542990 sshd[5003]: Accepted publickey for core from 139.178.89.65 port 34380 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:03.548397 kernel: audit: type=1101 audit(1719906543.541:1261): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.547000 audit[5003]: CRED_ACQ pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.549641 sshd[5003]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:03.557423 kernel: audit: type=1103 audit(1719906543.547:1262): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.557549 kernel: audit: type=1006 audit(1719906543.547:1263): pid=5003 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 2 07:49:03.557602 systemd[1]: Started session-14.scope. Jul 2 07:49:03.565551 kernel: audit: type=1300 audit(1719906543.547:1263): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddfb53240 a2=3 a3=0 items=0 ppid=1 pid=5003 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:03.547000 audit[5003]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddfb53240 a2=3 a3=0 items=0 ppid=1 pid=5003 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:03.558934 systemd-logind[1720]: New session 14 of user core. Jul 2 07:49:03.547000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:03.569540 kernel: audit: type=1327 audit(1719906543.547:1263): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:03.571000 audit[5003]: USER_START pid=5003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.582712 kernel: audit: type=1105 audit(1719906543.571:1264): pid=5003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.582851 kernel: audit: type=1103 audit(1719906543.573:1265): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.573000 audit[5005]: CRED_ACQ pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.809552 sshd[5003]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:03.809000 audit[5003]: USER_END pid=5003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.813760 systemd[1]: sshd@13-172.31.20.37:22-139.178.89.65:34380.service: Deactivated successfully. Jul 2 07:49:03.814718 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 07:49:03.817367 kernel: audit: type=1106 audit(1719906543.809:1266): pid=5003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.817723 systemd-logind[1720]: Session 14 logged out. Waiting for processes to exit. Jul 2 07:49:03.810000 audit[5003]: CRED_DISP pid=5003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.20.37:22-139.178.89.65:34380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:03.823424 kernel: audit: type=1104 audit(1719906543.810:1267): pid=5003 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:03.823569 systemd-logind[1720]: Removed session 14. Jul 2 07:49:08.836343 systemd[1]: Started sshd@14-172.31.20.37:22-139.178.89.65:37960.service. Jul 2 07:49:08.840804 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:49:08.840916 kernel: audit: type=1130 audit(1719906548.835:1269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.37:22-139.178.89.65:37960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:08.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.37:22-139.178.89.65:37960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:09.005000 audit[5016]: USER_ACCT pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.008966 sshd[5016]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:09.012498 kernel: audit: type=1101 audit(1719906549.005:1270): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.012543 sshd[5016]: Accepted publickey for core from 139.178.89.65 port 37960 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:09.005000 audit[5016]: CRED_ACQ pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.018597 kernel: audit: type=1103 audit(1719906549.005:1271): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.023258 kernel: audit: type=1006 audit(1719906549.005:1272): pid=5016 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 2 07:49:09.022786 systemd[1]: Started session-15.scope. Jul 2 07:49:09.005000 audit[5016]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9cc44300 a2=3 a3=0 items=0 ppid=1 pid=5016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:09.025279 systemd-logind[1720]: New session 15 of user core. Jul 2 07:49:09.031567 kernel: audit: type=1300 audit(1719906549.005:1272): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff9cc44300 a2=3 a3=0 items=0 ppid=1 pid=5016 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:09.005000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:09.040605 kernel: audit: type=1327 audit(1719906549.005:1272): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:09.040725 kernel: audit: type=1105 audit(1719906549.032:1273): pid=5016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.032000 audit[5016]: USER_START pid=5016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.044029 kernel: audit: type=1103 audit(1719906549.036:1274): pid=5018 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.036000 audit[5018]: CRED_ACQ pid=5018 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.232350 sshd[5016]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:09.233000 audit[5016]: USER_END pid=5016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.234000 audit[5016]: CRED_DISP pid=5016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.241610 systemd[1]: sshd@14-172.31.20.37:22-139.178.89.65:37960.service: Deactivated successfully. Jul 2 07:49:09.242571 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 07:49:09.244189 kernel: audit: type=1106 audit(1719906549.233:1275): pid=5016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.244260 kernel: audit: type=1104 audit(1719906549.234:1276): pid=5016 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:09.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.20.37:22-139.178.89.65:37960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:09.244999 systemd-logind[1720]: Session 15 logged out. Waiting for processes to exit. Jul 2 07:49:09.246040 systemd-logind[1720]: Removed session 15. Jul 2 07:49:14.261388 systemd[1]: Started sshd@15-172.31.20.37:22-139.178.89.65:37966.service. Jul 2 07:49:14.267767 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:49:14.267943 kernel: audit: type=1130 audit(1719906554.260:1278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.37:22-139.178.89.65:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:14.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.37:22-139.178.89.65:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:14.431000 audit[5039]: USER_ACCT pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.434805 sshd[5039]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:14.438151 sshd[5039]: Accepted publickey for core from 139.178.89.65 port 37966 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:14.438394 kernel: audit: type=1101 audit(1719906554.431:1279): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.432000 audit[5039]: CRED_ACQ pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.444350 kernel: audit: type=1103 audit(1719906554.432:1280): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.449397 kernel: audit: type=1006 audit(1719906554.433:1281): pid=5039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 2 07:49:14.433000 audit[5039]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3ff85c60 a2=3 a3=0 items=0 ppid=1 pid=5039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:14.456963 kernel: audit: type=1300 audit(1719906554.433:1281): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3ff85c60 a2=3 a3=0 items=0 ppid=1 pid=5039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:14.456237 systemd-logind[1720]: New session 16 of user core. Jul 2 07:49:14.457817 systemd[1]: Started session-16.scope. Jul 2 07:49:14.433000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:14.461346 kernel: audit: type=1327 audit(1719906554.433:1281): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:14.467000 audit[5039]: USER_START pid=5039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.475361 kernel: audit: type=1105 audit(1719906554.467:1282): pid=5039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.476000 audit[5041]: CRED_ACQ pid=5041 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.486471 kernel: audit: type=1103 audit(1719906554.476:1283): pid=5041 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.837412 sshd[5039]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:14.838000 audit[5039]: USER_END pid=5039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.838000 audit[5039]: CRED_DISP pid=5039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.850968 kernel: audit: type=1106 audit(1719906554.838:1284): pid=5039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.851111 kernel: audit: type=1104 audit(1719906554.838:1285): pid=5039 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:14.857714 systemd[1]: sshd@15-172.31.20.37:22-139.178.89.65:37966.service: Deactivated successfully. Jul 2 07:49:14.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.20.37:22-139.178.89.65:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:14.858936 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 07:49:14.860823 systemd-logind[1720]: Session 16 logged out. Waiting for processes to exit. Jul 2 07:49:14.862256 systemd-logind[1720]: Removed session 16. Jul 2 07:49:17.040219 systemd[1]: run-containerd-runc-k8s.io-1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0-runc.QDLSzI.mount: Deactivated successfully. Jul 2 07:49:19.086855 amazon-ssm-agent[1708]: 2024-07-02 07:49:19 INFO [HealthCheck] HealthCheck reporting agent health. Jul 2 07:49:19.863184 systemd[1]: Started sshd@16-172.31.20.37:22-139.178.89.65:41432.service. Jul 2 07:49:19.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.37:22-139.178.89.65:41432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:19.864360 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:49:19.864428 kernel: audit: type=1130 audit(1719906559.862:1287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.37:22-139.178.89.65:41432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:20.047000 audit[5077]: USER_ACCT pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.049155 sshd[5077]: Accepted publickey for core from 139.178.89.65 port 41432 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:20.052000 audit[5077]: CRED_ACQ pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.054621 sshd[5077]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:20.058901 kernel: audit: type=1101 audit(1719906560.047:1288): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.058996 kernel: audit: type=1103 audit(1719906560.052:1289): pid=5077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.062791 kernel: audit: type=1006 audit(1719906560.052:1290): pid=5077 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 07:49:20.062893 kernel: audit: type=1300 audit(1719906560.052:1290): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd78eb9df0 a2=3 a3=0 items=0 ppid=1 pid=5077 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:20.052000 audit[5077]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd78eb9df0 a2=3 a3=0 items=0 ppid=1 pid=5077 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:20.065146 systemd[1]: Started session-17.scope. Jul 2 07:49:20.067178 systemd-logind[1720]: New session 17 of user core. Jul 2 07:49:20.052000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:20.070374 kernel: audit: type=1327 audit(1719906560.052:1290): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:20.072000 audit[5077]: USER_START pid=5077 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.077000 audit[5079]: CRED_ACQ pid=5079 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.084093 kernel: audit: type=1105 audit(1719906560.072:1291): pid=5077 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.084220 kernel: audit: type=1103 audit(1719906560.077:1292): pid=5079 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.164847 systemd[1]: run-containerd-runc-k8s.io-81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578-runc.LGnd7m.mount: Deactivated successfully. Jul 2 07:49:20.346986 sshd[5077]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:20.349000 audit[5077]: USER_END pid=5077 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.355379 kernel: audit: type=1106 audit(1719906560.349:1293): pid=5077 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.349000 audit[5077]: CRED_DISP pid=5077 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.360437 kernel: audit: type=1104 audit(1719906560.349:1294): pid=5077 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.363396 systemd[1]: sshd@16-172.31.20.37:22-139.178.89.65:41432.service: Deactivated successfully. Jul 2 07:49:20.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.20.37:22-139.178.89.65:41432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:20.364350 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 07:49:20.365345 systemd-logind[1720]: Session 17 logged out. Waiting for processes to exit. Jul 2 07:49:20.366437 systemd-logind[1720]: Removed session 17. Jul 2 07:49:20.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.37:22-139.178.89.65:41442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:20.372708 systemd[1]: Started sshd@17-172.31.20.37:22-139.178.89.65:41442.service. Jul 2 07:49:20.534000 audit[5108]: USER_ACCT pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.536146 sshd[5108]: Accepted publickey for core from 139.178.89.65 port 41442 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:20.535000 audit[5108]: CRED_ACQ pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.535000 audit[5108]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4b52e2f0 a2=3 a3=0 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:20.535000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:20.538147 sshd[5108]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:20.544197 systemd[1]: Started session-18.scope. Jul 2 07:49:20.544877 systemd-logind[1720]: New session 18 of user core. Jul 2 07:49:20.549000 audit[5108]: USER_START pid=5108 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:20.551000 audit[5110]: CRED_ACQ pid=5110 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:21.264351 sshd[5108]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:21.264000 audit[5108]: USER_END pid=5108 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:21.264000 audit[5108]: CRED_DISP pid=5108 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:21.269159 systemd[1]: sshd@17-172.31.20.37:22-139.178.89.65:41442.service: Deactivated successfully. Jul 2 07:49:21.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.20.37:22-139.178.89.65:41442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:21.270455 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 07:49:21.270634 systemd-logind[1720]: Session 18 logged out. Waiting for processes to exit. Jul 2 07:49:21.272374 systemd-logind[1720]: Removed session 18. Jul 2 07:49:21.291932 systemd[1]: Started sshd@18-172.31.20.37:22-139.178.89.65:41452.service. Jul 2 07:49:21.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.37:22-139.178.89.65:41452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:21.462000 audit[5118]: USER_ACCT pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:21.463787 sshd[5118]: Accepted publickey for core from 139.178.89.65 port 41452 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:21.463000 audit[5118]: CRED_ACQ pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:21.463000 audit[5118]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff46ac9700 a2=3 a3=0 items=0 ppid=1 pid=5118 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:21.463000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:21.465589 sshd[5118]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:21.471315 systemd[1]: Started session-19.scope. Jul 2 07:49:21.472371 systemd-logind[1720]: New session 19 of user core. Jul 2 07:49:21.476000 audit[5118]: USER_START pid=5118 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:21.478000 audit[5120]: CRED_ACQ pid=5120 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:23.447000 audit[5135]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=5135 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:23.447000 audit[5135]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffc05b19af0 a2=0 a3=7ffc05b19adc items=0 ppid=2964 pid=5135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:23.447000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:23.448000 audit[5135]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=5135 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:23.448000 audit[5135]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc05b19af0 a2=0 a3=0 items=0 ppid=2964 pid=5135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:23.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:23.458866 sshd[5118]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:23.459000 audit[5118]: USER_END pid=5118 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:23.460000 audit[5118]: CRED_DISP pid=5118 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:23.464171 systemd[1]: sshd@18-172.31.20.37:22-139.178.89.65:41452.service: Deactivated successfully. Jul 2 07:49:23.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.20.37:22-139.178.89.65:41452 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:23.465980 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 07:49:23.466283 systemd-logind[1720]: Session 19 logged out. Waiting for processes to exit. Jul 2 07:49:23.468044 systemd-logind[1720]: Removed session 19. Jul 2 07:49:23.485373 systemd[1]: Started sshd@19-172.31.20.37:22-139.178.89.65:41466.service. Jul 2 07:49:23.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.37:22-139.178.89.65:41466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:23.483000 audit[5138]: NETFILTER_CFG table=filter:115 family=2 entries=32 op=nft_register_rule pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:23.483000 audit[5138]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7fff10ef89a0 a2=0 a3=7fff10ef898c items=0 ppid=2964 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:23.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:23.488000 audit[5138]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5138 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:23.488000 audit[5138]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff10ef89a0 a2=0 a3=0 items=0 ppid=2964 pid=5138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:23.488000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:23.670000 audit[5140]: USER_ACCT pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:23.671710 sshd[5140]: Accepted publickey for core from 139.178.89.65 port 41466 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:23.671000 audit[5140]: CRED_ACQ pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:23.671000 audit[5140]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde2722cd0 a2=3 a3=0 items=0 ppid=1 pid=5140 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:23.671000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:23.674101 sshd[5140]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:23.680506 systemd-logind[1720]: New session 20 of user core. Jul 2 07:49:23.681167 systemd[1]: Started session-20.scope. Jul 2 07:49:23.687000 audit[5140]: USER_START pid=5140 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:23.688000 audit[5142]: CRED_ACQ pid=5142 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.235352 sshd[5140]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:24.235000 audit[5140]: USER_END pid=5140 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.235000 audit[5140]: CRED_DISP pid=5140 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.20.37:22-139.178.89.65:41466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:24.238713 systemd[1]: sshd@19-172.31.20.37:22-139.178.89.65:41466.service: Deactivated successfully. Jul 2 07:49:24.239913 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 07:49:24.240810 systemd-logind[1720]: Session 20 logged out. Waiting for processes to exit. Jul 2 07:49:24.242122 systemd-logind[1720]: Removed session 20. Jul 2 07:49:24.260621 systemd[1]: Started sshd@20-172.31.20.37:22-139.178.89.65:41468.service. Jul 2 07:49:24.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.37:22-139.178.89.65:41468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:24.421000 audit[5150]: USER_ACCT pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.422651 sshd[5150]: Accepted publickey for core from 139.178.89.65 port 41468 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:24.422000 audit[5150]: CRED_ACQ pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.422000 audit[5150]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc50d20890 a2=3 a3=0 items=0 ppid=1 pid=5150 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:24.422000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:24.424175 sshd[5150]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:24.430014 systemd[1]: Started session-21.scope. Jul 2 07:49:24.430545 systemd-logind[1720]: New session 21 of user core. Jul 2 07:49:24.435000 audit[5150]: USER_START pid=5150 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.437000 audit[5152]: CRED_ACQ pid=5152 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.652529 sshd[5150]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:24.653000 audit[5150]: USER_END pid=5150 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.653000 audit[5150]: CRED_DISP pid=5150 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:24.656441 systemd[1]: sshd@20-172.31.20.37:22-139.178.89.65:41468.service: Deactivated successfully. Jul 2 07:49:24.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.20.37:22-139.178.89.65:41468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:24.657484 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 07:49:24.658350 systemd-logind[1720]: Session 21 logged out. Waiting for processes to exit. Jul 2 07:49:24.659427 systemd-logind[1720]: Removed session 21. Jul 2 07:49:29.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.37:22-139.178.89.65:40410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:29.686278 systemd[1]: Started sshd@21-172.31.20.37:22-139.178.89.65:40410.service. Jul 2 07:49:29.698271 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 2 07:49:29.698879 kernel: audit: type=1130 audit(1719906569.685:1336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.37:22-139.178.89.65:40410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:29.880000 audit[5161]: USER_ACCT pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.882561 sshd[5161]: Accepted publickey for core from 139.178.89.65 port 40410 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:29.887953 kernel: audit: type=1101 audit(1719906569.880:1337): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.888444 kernel: audit: type=1103 audit(1719906569.885:1338): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.885000 audit[5161]: CRED_ACQ pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.889637 sshd[5161]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:29.897003 kernel: audit: type=1006 audit(1719906569.887:1339): pid=5161 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 2 07:49:29.903720 kernel: audit: type=1300 audit(1719906569.887:1339): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd83d6d7d0 a2=3 a3=0 items=0 ppid=1 pid=5161 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:29.887000 audit[5161]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd83d6d7d0 a2=3 a3=0 items=0 ppid=1 pid=5161 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:29.898847 systemd[1]: Started session-22.scope. Jul 2 07:49:29.901310 systemd-logind[1720]: New session 22 of user core. Jul 2 07:49:29.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:29.907364 kernel: audit: type=1327 audit(1719906569.887:1339): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:29.909000 audit[5161]: USER_START pid=5161 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.917408 kernel: audit: type=1105 audit(1719906569.909:1340): pid=5161 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.917000 audit[5163]: CRED_ACQ pid=5163 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:29.926386 kernel: audit: type=1103 audit(1719906569.917:1341): pid=5163 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:30.141973 sshd[5161]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:30.142000 audit[5161]: USER_END pid=5161 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:30.142000 audit[5161]: CRED_DISP pid=5161 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:30.153992 systemd-logind[1720]: Session 22 logged out. Waiting for processes to exit. Jul 2 07:49:30.154655 kernel: audit: type=1106 audit(1719906570.142:1342): pid=5161 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:30.154790 kernel: audit: type=1104 audit(1719906570.142:1343): pid=5161 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:30.155972 systemd[1]: sshd@21-172.31.20.37:22-139.178.89.65:40410.service: Deactivated successfully. Jul 2 07:49:30.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.20.37:22-139.178.89.65:40410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:30.157343 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 07:49:30.158479 systemd-logind[1720]: Removed session 22. Jul 2 07:49:32.342000 audit[5173]: NETFILTER_CFG table=filter:117 family=2 entries=20 op=nft_register_rule pid=5173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:32.342000 audit[5173]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffeace953e0 a2=0 a3=7ffeace953cc items=0 ppid=2964 pid=5173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:32.342000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:32.346000 audit[5173]: NETFILTER_CFG table=nat:118 family=2 entries=104 op=nft_register_chain pid=5173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:32.346000 audit[5173]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffeace953e0 a2=0 a3=7ffeace953cc items=0 ppid=2964 pid=5173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:32.346000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:35.180863 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 2 07:49:35.181084 kernel: audit: type=1130 audit(1719906575.170:1347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.37:22-139.178.89.65:40424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:35.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.37:22-139.178.89.65:40424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:35.170511 systemd[1]: Started sshd@22-172.31.20.37:22-139.178.89.65:40424.service. Jul 2 07:49:35.345000 audit[5184]: USER_ACCT pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.351664 sshd[5184]: Accepted publickey for core from 139.178.89.65 port 40424 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:35.351000 audit[5184]: CRED_ACQ pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.352271 sshd[5184]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:35.358732 kernel: audit: type=1101 audit(1719906575.345:1348): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.358837 kernel: audit: type=1103 audit(1719906575.351:1349): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.358870 kernel: audit: type=1006 audit(1719906575.351:1350): pid=5184 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 2 07:49:35.361034 systemd[1]: Started session-23.scope. Jul 2 07:49:35.351000 audit[5184]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc41f9010 a2=3 a3=0 items=0 ppid=1 pid=5184 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:35.364612 systemd-logind[1720]: New session 23 of user core. Jul 2 07:49:35.369482 kernel: audit: type=1300 audit(1719906575.351:1350): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc41f9010 a2=3 a3=0 items=0 ppid=1 pid=5184 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:35.351000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:35.371000 audit[5184]: USER_START pid=5184 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.380103 kernel: audit: type=1327 audit(1719906575.351:1350): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:35.380219 kernel: audit: type=1105 audit(1719906575.371:1351): pid=5184 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.380255 kernel: audit: type=1103 audit(1719906575.373:1352): pid=5186 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.373000 audit[5186]: CRED_ACQ pid=5186 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.614662 sshd[5184]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:35.616000 audit[5184]: USER_END pid=5184 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.621575 systemd[1]: sshd@22-172.31.20.37:22-139.178.89.65:40424.service: Deactivated successfully. Jul 2 07:49:35.623173 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 07:49:35.626446 kernel: audit: type=1106 audit(1719906575.616:1353): pid=5184 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.618000 audit[5184]: CRED_DISP pid=5184 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:35.627014 systemd-logind[1720]: Session 23 logged out. Waiting for processes to exit. Jul 2 07:49:35.629706 systemd-logind[1720]: Removed session 23. Jul 2 07:49:35.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.20.37:22-139.178.89.65:40424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:35.632495 kernel: audit: type=1104 audit(1719906575.618:1354): pid=5184 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:37.890941 kubelet[2790]: I0702 07:49:37.890892 2790 topology_manager.go:215] "Topology Admit Handler" podUID="d91038d9-4bf0-407e-80bf-df59bfdc282a" podNamespace="calico-apiserver" podName="calico-apiserver-7f69684449-jrcgm" Jul 2 07:49:37.921690 kubelet[2790]: I0702 07:49:37.921644 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/d91038d9-4bf0-407e-80bf-df59bfdc282a-calico-apiserver-certs\") pod \"calico-apiserver-7f69684449-jrcgm\" (UID: \"d91038d9-4bf0-407e-80bf-df59bfdc282a\") " pod="calico-apiserver/calico-apiserver-7f69684449-jrcgm" Jul 2 07:49:37.921931 kubelet[2790]: I0702 07:49:37.921847 2790 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ldjb5\" (UniqueName: \"kubernetes.io/projected/d91038d9-4bf0-407e-80bf-df59bfdc282a-kube-api-access-ldjb5\") pod \"calico-apiserver-7f69684449-jrcgm\" (UID: \"d91038d9-4bf0-407e-80bf-df59bfdc282a\") " pod="calico-apiserver/calico-apiserver-7f69684449-jrcgm" Jul 2 07:49:37.948115 systemd[1]: Created slice kubepods-besteffort-podd91038d9_4bf0_407e_80bf_df59bfdc282a.slice. Jul 2 07:49:37.963000 audit[5196]: NETFILTER_CFG table=filter:119 family=2 entries=9 op=nft_register_rule pid=5196 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:37.963000 audit[5196]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffca4424220 a2=0 a3=7ffca442420c items=0 ppid=2964 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:37.963000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:37.965000 audit[5196]: NETFILTER_CFG table=nat:120 family=2 entries=44 op=nft_register_rule pid=5196 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:37.965000 audit[5196]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffca4424220 a2=0 a3=7ffca442420c items=0 ppid=2964 pid=5196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:37.965000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:37.979000 audit[5198]: NETFILTER_CFG table=filter:121 family=2 entries=10 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:37.979000 audit[5198]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffdd08c3c70 a2=0 a3=7ffdd08c3c5c items=0 ppid=2964 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:37.979000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:37.982000 audit[5198]: NETFILTER_CFG table=nat:122 family=2 entries=44 op=nft_register_rule pid=5198 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:37.982000 audit[5198]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffdd08c3c70 a2=0 a3=7ffdd08c3c5c items=0 ppid=2964 pid=5198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:37.982000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:38.025984 kubelet[2790]: E0702 07:49:38.025947 2790 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Jul 2 07:49:38.037142 kubelet[2790]: E0702 07:49:38.037089 2790 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/d91038d9-4bf0-407e-80bf-df59bfdc282a-calico-apiserver-certs podName:d91038d9-4bf0-407e-80bf-df59bfdc282a nodeName:}" failed. No retries permitted until 2024-07-02 07:49:38.529644791 +0000 UTC m=+109.620857973 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/d91038d9-4bf0-407e-80bf-df59bfdc282a-calico-apiserver-certs") pod "calico-apiserver-7f69684449-jrcgm" (UID: "d91038d9-4bf0-407e-80bf-df59bfdc282a") : secret "calico-apiserver-certs" not found Jul 2 07:49:38.863582 env[1727]: time="2024-07-02T07:49:38.863443801Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f69684449-jrcgm,Uid:d91038d9-4bf0-407e-80bf-df59bfdc282a,Namespace:calico-apiserver,Attempt:0,}" Jul 2 07:49:39.280173 systemd-networkd[1457]: cali0472551162c: Link UP Jul 2 07:49:39.285088 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:49:39.285744 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0472551162c: link becomes ready Jul 2 07:49:39.284452 systemd-networkd[1457]: cali0472551162c: Gained carrier Jul 2 07:49:39.284601 (udev-worker)[5219]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.109 [INFO][5202] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0 calico-apiserver-7f69684449- calico-apiserver d91038d9-4bf0-407e-80bf-df59bfdc282a 1104 0 2024-07-02 07:49:37 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7f69684449 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-20-37 calico-apiserver-7f69684449-jrcgm eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0472551162c [] []}} ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.110 [INFO][5202] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.191 [INFO][5212] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" HandleID="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Workload="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.212 [INFO][5212] ipam_plugin.go 264: Auto assigning IP ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" HandleID="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Workload="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000286430), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-20-37", "pod":"calico-apiserver-7f69684449-jrcgm", "timestamp":"2024-07-02 07:49:39.191374418 +0000 UTC"}, Hostname:"ip-172-31-20-37", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.212 [INFO][5212] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.212 [INFO][5212] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.212 [INFO][5212] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-20-37' Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.219 [INFO][5212] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.229 [INFO][5212] ipam.go 372: Looking up existing affinities for host host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.235 [INFO][5212] ipam.go 489: Trying affinity for 192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.237 [INFO][5212] ipam.go 155: Attempting to load block cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.240 [INFO][5212] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.127.0/26 host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.241 [INFO][5212] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.127.0/26 handle="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.242 [INFO][5212] ipam.go 1685: Creating new handle: k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2 Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.248 [INFO][5212] ipam.go 1203: Writing block in order to claim IPs block=192.168.127.0/26 handle="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.270 [INFO][5212] ipam.go 1216: Successfully claimed IPs: [192.168.127.5/26] block=192.168.127.0/26 handle="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.271 [INFO][5212] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.127.5/26] handle="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" host="ip-172-31-20-37" Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.271 [INFO][5212] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:49:39.303509 env[1727]: 2024-07-02 07:49:39.271 [INFO][5212] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.127.5/26] IPv6=[] ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" HandleID="k8s-pod-network.ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Workload="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.304627 env[1727]: 2024-07-02 07:49:39.275 [INFO][5202] k8s.go 386: Populated endpoint ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0", GenerateName:"calico-apiserver-7f69684449-", Namespace:"calico-apiserver", SelfLink:"", UID:"d91038d9-4bf0-407e-80bf-df59bfdc282a", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 49, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f69684449", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"", Pod:"calico-apiserver-7f69684449-jrcgm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.127.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0472551162c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:49:39.304627 env[1727]: 2024-07-02 07:49:39.275 [INFO][5202] k8s.go 387: Calico CNI using IPs: [192.168.127.5/32] ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.304627 env[1727]: 2024-07-02 07:49:39.275 [INFO][5202] dataplane_linux.go 68: Setting the host side veth name to cali0472551162c ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.304627 env[1727]: 2024-07-02 07:49:39.286 [INFO][5202] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.304627 env[1727]: 2024-07-02 07:49:39.287 [INFO][5202] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0", GenerateName:"calico-apiserver-7f69684449-", Namespace:"calico-apiserver", SelfLink:"", UID:"d91038d9-4bf0-407e-80bf-df59bfdc282a", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 49, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7f69684449", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-20-37", ContainerID:"ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2", Pod:"calico-apiserver-7f69684449-jrcgm", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.127.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0472551162c", MAC:"da:e0:14:09:79:33", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:49:39.304627 env[1727]: 2024-07-02 07:49:39.300 [INFO][5202] k8s.go 500: Wrote updated endpoint to datastore ContainerID="ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2" Namespace="calico-apiserver" Pod="calico-apiserver-7f69684449-jrcgm" WorkloadEndpoint="ip--172--31--20--37-k8s-calico--apiserver--7f69684449--jrcgm-eth0" Jul 2 07:49:39.330730 env[1727]: time="2024-07-02T07:49:39.330634496Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:49:39.330933 env[1727]: time="2024-07-02T07:49:39.330696105Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:49:39.330933 env[1727]: time="2024-07-02T07:49:39.330710677Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:49:39.331117 env[1727]: time="2024-07-02T07:49:39.330994705Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2 pid=5240 runtime=io.containerd.runc.v2 Jul 2 07:49:39.357000 audit[5258]: NETFILTER_CFG table=filter:123 family=2 entries=61 op=nft_register_chain pid=5258 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:49:39.357000 audit[5258]: SYSCALL arch=c000003e syscall=46 success=yes exit=30316 a0=3 a1=7ffde1f17020 a2=0 a3=7ffde1f1700c items=0 ppid=3830 pid=5258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:39.357000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:49:39.374762 systemd[1]: run-containerd-runc-k8s.io-ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2-runc.xui7SN.mount: Deactivated successfully. Jul 2 07:49:39.380476 systemd[1]: Started cri-containerd-ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2.scope. Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.406000 audit: BPF prog-id=180 op=LOAD Jul 2 07:49:39.407000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.407000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=5240 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:39.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164303463393335653462333866626433313864626632616464383733 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=5240 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:39.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164303463393335653462333866626433313864626632616464383733 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit: BPF prog-id=181 op=LOAD Jul 2 07:49:39.408000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001dfd40 items=0 ppid=5240 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:39.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164303463393335653462333866626433313864626632616464383733 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.408000 audit: BPF prog-id=182 op=LOAD Jul 2 07:49:39.408000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001dfd88 items=0 ppid=5240 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:39.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164303463393335653462333866626433313864626632616464383733 Jul 2 07:49:39.408000 audit: BPF prog-id=182 op=UNLOAD Jul 2 07:49:39.411000 audit: BPF prog-id=181 op=UNLOAD Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { perfmon } for pid=5251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit[5251]: AVC avc: denied { bpf } for pid=5251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:39.411000 audit: BPF prog-id=183 op=LOAD Jul 2 07:49:39.411000 audit[5251]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000346198 items=0 ppid=5240 pid=5251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:39.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164303463393335653462333866626433313864626632616464383733 Jul 2 07:49:39.452770 env[1727]: time="2024-07-02T07:49:39.452720404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7f69684449-jrcgm,Uid:d91038d9-4bf0-407e-80bf-df59bfdc282a,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2\"" Jul 2 07:49:39.458014 env[1727]: time="2024-07-02T07:49:39.457968831Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 07:49:40.646252 systemd[1]: Started sshd@23-172.31.20.37:22-139.178.89.65:50766.service. Jul 2 07:49:40.650618 kernel: kauditd_printk_skb: 73 callbacks suppressed Jul 2 07:49:40.650707 kernel: audit: type=1130 audit(1719906580.646:1379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.37:22-139.178.89.65:50766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:40.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.37:22-139.178.89.65:50766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:40.927000 audit[5274]: USER_ACCT pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:40.929284 sshd[5274]: Accepted publickey for core from 139.178.89.65 port 50766 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:40.932365 kernel: audit: type=1101 audit(1719906580.927:1380): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:40.931000 audit[5274]: CRED_ACQ pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:40.939348 kernel: audit: type=1103 audit(1719906580.931:1381): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:40.952281 kernel: audit: type=1006 audit(1719906580.931:1382): pid=5274 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 07:49:40.952412 kernel: audit: type=1300 audit(1719906580.931:1382): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe94d8e930 a2=3 a3=0 items=0 ppid=1 pid=5274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:40.931000 audit[5274]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe94d8e930 a2=3 a3=0 items=0 ppid=1 pid=5274 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:40.931000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:40.959353 kernel: audit: type=1327 audit(1719906580.931:1382): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:40.960215 sshd[5274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:40.966566 systemd-networkd[1457]: cali0472551162c: Gained IPv6LL Jul 2 07:49:40.979389 systemd[1]: Started session-24.scope. Jul 2 07:49:40.984743 systemd-logind[1720]: New session 24 of user core. Jul 2 07:49:41.051000 audit[5274]: USER_START pid=5274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.053413 kernel: audit: type=1105 audit(1719906581.051:1383): pid=5274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.057000 audit[5276]: CRED_ACQ pid=5276 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.058373 kernel: audit: type=1103 audit(1719906581.057:1384): pid=5276 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.808620 sshd[5274]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:41.810000 audit[5274]: USER_END pid=5274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.819136 systemd[1]: sshd@23-172.31.20.37:22-139.178.89.65:50766.service: Deactivated successfully. Jul 2 07:49:41.819579 kernel: audit: type=1106 audit(1719906581.810:1385): pid=5274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.820205 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 07:49:41.810000 audit[5274]: CRED_DISP pid=5274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.826431 kernel: audit: type=1104 audit(1719906581.810:1386): pid=5274 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:41.827432 systemd-logind[1720]: Session 24 logged out. Waiting for processes to exit. Jul 2 07:49:41.829093 systemd-logind[1720]: Removed session 24. Jul 2 07:49:41.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.20.37:22-139.178.89.65:50766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:42.459000 audit[5286]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=5286 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:42.459000 audit[5286]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fffc9bbad60 a2=0 a3=7fffc9bbad4c items=0 ppid=2964 pid=5286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.459000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:42.462000 audit[5286]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=5286 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:42.462000 audit[5286]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7fffc9bbad60 a2=0 a3=7fffc9bbad4c items=0 ppid=2964 pid=5286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.462000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:42.478512 env[1727]: time="2024-07-02T07:49:42.478465743Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:49:42.483675 env[1727]: time="2024-07-02T07:49:42.483630599Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:49:42.486462 env[1727]: time="2024-07-02T07:49:42.486425418Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:49:42.489079 env[1727]: time="2024-07-02T07:49:42.489041732Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:49:42.490188 env[1727]: time="2024-07-02T07:49:42.489676247Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 07:49:42.494917 env[1727]: time="2024-07-02T07:49:42.494881162Z" level=info msg="CreateContainer within sandbox \"ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 07:49:42.516705 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1415319825.mount: Deactivated successfully. Jul 2 07:49:42.518597 env[1727]: time="2024-07-02T07:49:42.518559125Z" level=info msg="CreateContainer within sandbox \"ad04c935e4b38fbd318dbf2add873c7dcb0f894d8cb0bb7bd371eb5e92f4def2\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"4efc07a21d45c32790bf14abb3c6999cdcc0d0a0e6b43bf1c2478fc92c5d6477\"" Jul 2 07:49:42.519560 env[1727]: time="2024-07-02T07:49:42.519528557Z" level=info msg="StartContainer for \"4efc07a21d45c32790bf14abb3c6999cdcc0d0a0e6b43bf1c2478fc92c5d6477\"" Jul 2 07:49:42.556110 systemd[1]: run-containerd-runc-k8s.io-4efc07a21d45c32790bf14abb3c6999cdcc0d0a0e6b43bf1c2478fc92c5d6477-runc.FMSVG6.mount: Deactivated successfully. Jul 2 07:49:42.562096 systemd[1]: Started cri-containerd-4efc07a21d45c32790bf14abb3c6999cdcc0d0a0e6b43bf1c2478fc92c5d6477.scope. Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.591000 audit: BPF prog-id=184 op=LOAD Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=5240 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666330376132316434356333323739306266313461626233633639 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=5240 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666330376132316434356333323739306266313461626233633639 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit: BPF prog-id=185 op=LOAD Jul 2 07:49:42.592000 audit[5294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028aef0 items=0 ppid=5240 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666330376132316434356333323739306266313461626233633639 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.592000 audit: BPF prog-id=186 op=LOAD Jul 2 07:49:42.592000 audit[5294]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028af38 items=0 ppid=5240 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666330376132316434356333323739306266313461626233633639 Jul 2 07:49:42.592000 audit: BPF prog-id=186 op=UNLOAD Jul 2 07:49:42.592000 audit: BPF prog-id=185 op=UNLOAD Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { perfmon } for pid=5294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit[5294]: AVC avc: denied { bpf } for pid=5294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:49:42.593000 audit: BPF prog-id=187 op=LOAD Jul 2 07:49:42.593000 audit[5294]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028b348 items=0 ppid=5240 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465666330376132316434356333323739306266313461626233633639 Jul 2 07:49:42.611000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:42.611000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001dd0480 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:49:42.611000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:49:42.614000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:42.614000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025c0000 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:49:42.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:49:42.630618 env[1727]: time="2024-07-02T07:49:42.630566708Z" level=info msg="StartContainer for \"4efc07a21d45c32790bf14abb3c6999cdcc0d0a0e6b43bf1c2478fc92c5d6477\" returns successfully" Jul 2 07:49:42.785726 kubelet[2790]: I0702 07:49:42.785686 2790 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7f69684449-jrcgm" podStartSLOduration=2.74839651 podStartE2EDuration="5.784602692s" podCreationTimestamp="2024-07-02 07:49:37 +0000 UTC" firstStartedPulling="2024-07-02 07:49:39.454680295 +0000 UTC m=+110.545893459" lastFinishedPulling="2024-07-02 07:49:42.490886475 +0000 UTC m=+113.582099641" observedRunningTime="2024-07-02 07:49:42.783017687 +0000 UTC m=+113.874230871" watchObservedRunningTime="2024-07-02 07:49:42.784602692 +0000 UTC m=+113.875815877" Jul 2 07:49:42.812000 audit[5323]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:42.812000 audit[5323]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffed40fe1d0 a2=0 a3=7ffed40fe1bc items=0 ppid=2964 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.812000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:42.814000 audit[5323]: NETFILTER_CFG table=nat:127 family=2 entries=44 op=nft_register_rule pid=5323 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:42.814000 audit[5323]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffed40fe1d0 a2=0 a3=7ffed40fe1bc items=0 ppid=2964 pid=5323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:42.814000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:43.574000 audit[5304]: AVC avc: denied { watch } for pid=5304 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_07_49_38.823420628/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c52,c390 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c52,c390 tclass=file permissive=0 Jul 2 07:49:43.574000 audit[5304]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0006f8920 a2=fc6 a3=0 items=0 ppid=5240 pid=5304 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c52,c390 key=(null) Jul 2 07:49:43.574000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 07:49:43.641000 audit[5326]: NETFILTER_CFG table=filter:128 family=2 entries=9 op=nft_register_rule pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:43.641000 audit[5326]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffc3ac6d300 a2=0 a3=7ffc3ac6d2ec items=0 ppid=2964 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:43.641000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:43.644000 audit[5326]: NETFILTER_CFG table=nat:129 family=2 entries=51 op=nft_register_chain pid=5326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:49:43.644000 audit[5326]: SYSCALL arch=c000003e syscall=46 success=yes exit=18564 a0=3 a1=7ffc3ac6d300 a2=0 a3=7ffc3ac6d2ec items=0 ppid=2964 pid=5326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:43.644000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:49:43.931000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520989 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:43.931000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:43.931000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0066dc900 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:49:43.931000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:49:43.931000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520983 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:43.931000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0066dc960 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:49:43.931000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:49:43.931000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:43.931000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00ee93e00 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:49:43.931000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:49:43.931000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0027591d0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:49:43.931000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:49:43.943000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:43.943000 audit[2555]: AVC avc: denied { watch } for pid=2555 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520987 scontext=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:43.943000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00c4eab20 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:49:43.943000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:49:43.943000 audit[2555]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0017040f0 a2=fc6 a3=0 items=0 ppid=2411 pid=2555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c517,c555 key=(null) Jul 2 07:49:43.943000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32302E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:49:46.833072 systemd[1]: Started sshd@24-172.31.20.37:22-139.178.89.65:50770.service. Jul 2 07:49:46.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.37:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:46.835430 kernel: kauditd_printk_skb: 103 callbacks suppressed Jul 2 07:49:46.836766 kernel: audit: type=1130 audit(1719906586.832:1421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.37:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:47.023000 audit[5335]: USER_ACCT pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.037413 kernel: audit: type=1101 audit(1719906587.023:1422): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.037581 kernel: audit: type=1103 audit(1719906587.030:1423): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.030000 audit[5335]: CRED_ACQ pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.052572 kernel: audit: type=1006 audit(1719906587.030:1424): pid=5335 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 2 07:49:47.052659 kernel: audit: type=1300 audit(1719906587.030:1424): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4e395920 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:47.030000 audit[5335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4e395920 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:47.052984 sshd[5335]: Accepted publickey for core from 139.178.89.65 port 50770 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:47.038802 sshd[5335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:47.030000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:47.057422 kernel: audit: type=1327 audit(1719906587.030:1424): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:47.073392 systemd[1]: run-containerd-runc-k8s.io-1efce864eee75569a6a8ba1f524e5ebf2205a42b3cbf579d7b83a9f31525eba0-runc.S6ztiO.mount: Deactivated successfully. Jul 2 07:49:47.085972 systemd[1]: Started session-25.scope. Jul 2 07:49:47.087162 systemd-logind[1720]: New session 25 of user core. Jul 2 07:49:47.093000 audit[5335]: USER_START pid=5335 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.100973 kernel: audit: type=1105 audit(1719906587.093:1425): pid=5335 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.101076 kernel: audit: type=1103 audit(1719906587.099:1426): pid=5345 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.099000 audit[5345]: CRED_ACQ pid=5345 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.480020 sshd[5335]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:47.487580 kernel: audit: type=1106 audit(1719906587.481:1427): pid=5335 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.481000 audit[5335]: USER_END pid=5335 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.483990 systemd-logind[1720]: Session 25 logged out. Waiting for processes to exit. Jul 2 07:49:47.485698 systemd[1]: sshd@24-172.31.20.37:22-139.178.89.65:50770.service: Deactivated successfully. Jul 2 07:49:47.486647 systemd[1]: session-25.scope: Deactivated successfully. Jul 2 07:49:47.481000 audit[5335]: CRED_DISP pid=5335 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.492854 kernel: audit: type=1104 audit(1719906587.481:1428): pid=5335 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:47.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.20.37:22-139.178.89.65:50770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:47.488440 systemd-logind[1720]: Removed session 25. Jul 2 07:49:49.681000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:49.681000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:49.681000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002524280 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:49:49.681000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:49:49.681000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002347580 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:49:49.681000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:49:49.688000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:49.688000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002347760 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:49:49.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:49:49.688000 audit[2540]: AVC avc: denied { watch } for pid=2540 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520981 scontext=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:49:49.688000 audit[2540]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002524420 a2=fc6 a3=0 items=0 ppid=2407 pid=2540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c480,c968 key=(null) Jul 2 07:49:49.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:49:50.180273 systemd[1]: run-containerd-runc-k8s.io-81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578-runc.YE902N.mount: Deactivated successfully. Jul 2 07:49:51.300574 systemd[1]: run-containerd-runc-k8s.io-81f4558edd70bbff25e0f45f6648fa194005ad25da89a19bcd7f29c79191c578-runc.KZBcIp.mount: Deactivated successfully. Jul 2 07:49:52.506726 systemd[1]: Started sshd@25-172.31.20.37:22-139.178.89.65:37036.service. Jul 2 07:49:52.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.37:22-139.178.89.65:37036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:52.507994 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 07:49:52.508840 kernel: audit: type=1130 audit(1719906592.506:1434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.37:22-139.178.89.65:37036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:52.685000 audit[5417]: USER_ACCT pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.686475 sshd[5417]: Accepted publickey for core from 139.178.89.65 port 37036 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:52.695189 kernel: audit: type=1101 audit(1719906592.685:1435): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.695307 kernel: audit: type=1103 audit(1719906592.690:1436): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.690000 audit[5417]: CRED_ACQ pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.695824 sshd[5417]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:52.690000 audit[5417]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3fd87520 a2=3 a3=0 items=0 ppid=1 pid=5417 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:52.703600 systemd[1]: Started session-26.scope. Jul 2 07:49:52.705801 kernel: audit: type=1006 audit(1719906592.690:1437): pid=5417 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 2 07:49:52.705920 kernel: audit: type=1300 audit(1719906592.690:1437): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3fd87520 a2=3 a3=0 items=0 ppid=1 pid=5417 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:52.705956 kernel: audit: type=1327 audit(1719906592.690:1437): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:52.690000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:52.706109 systemd-logind[1720]: New session 26 of user core. Jul 2 07:49:52.713000 audit[5417]: USER_START pid=5417 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.715000 audit[5419]: CRED_ACQ pid=5419 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.723833 kernel: audit: type=1105 audit(1719906592.713:1438): pid=5417 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.723986 kernel: audit: type=1103 audit(1719906592.715:1439): pid=5419 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.970354 sshd[5417]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:52.971000 audit[5417]: USER_END pid=5417 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.971000 audit[5417]: CRED_DISP pid=5417 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.980133 systemd[1]: sshd@25-172.31.20.37:22-139.178.89.65:37036.service: Deactivated successfully. Jul 2 07:49:52.981282 systemd[1]: session-26.scope: Deactivated successfully. Jul 2 07:49:52.982930 kernel: audit: type=1106 audit(1719906592.971:1440): pid=5417 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.983026 kernel: audit: type=1104 audit(1719906592.971:1441): pid=5417 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:52.977000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.20.37:22-139.178.89.65:37036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:52.983831 systemd-logind[1720]: Session 26 logged out. Waiting for processes to exit. Jul 2 07:49:52.985000 systemd-logind[1720]: Removed session 26. Jul 2 07:49:58.005071 systemd[1]: Started sshd@26-172.31.20.37:22-139.178.89.65:37052.service. Jul 2 07:49:58.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.20.37:22-139.178.89.65:37052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:58.007424 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:49:58.007995 kernel: audit: type=1130 audit(1719906598.006:1443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.20.37:22-139.178.89.65:37052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:49:58.190000 audit[5433]: USER_ACCT pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.195755 sshd[5433]: Accepted publickey for core from 139.178.89.65 port 37052 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:49:58.195000 audit[5433]: CRED_ACQ pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.196281 sshd[5433]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:49:58.200299 kernel: audit: type=1101 audit(1719906598.190:1444): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.200404 kernel: audit: type=1103 audit(1719906598.195:1445): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.195000 audit[5433]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc150bd0 a2=3 a3=0 items=0 ppid=1 pid=5433 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:58.206480 systemd[1]: Started session-27.scope. Jul 2 07:49:58.207777 systemd-logind[1720]: New session 27 of user core. Jul 2 07:49:58.209530 kernel: audit: type=1006 audit(1719906598.195:1446): pid=5433 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 2 07:49:58.209608 kernel: audit: type=1300 audit(1719906598.195:1446): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc150bd0 a2=3 a3=0 items=0 ppid=1 pid=5433 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:49:58.209639 kernel: audit: type=1327 audit(1719906598.195:1446): proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:58.195000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:49:58.215000 audit[5433]: USER_START pid=5433 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.226404 kernel: audit: type=1105 audit(1719906598.215:1447): pid=5433 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.226543 kernel: audit: type=1103 audit(1719906598.218:1448): pid=5436 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.218000 audit[5436]: CRED_ACQ pid=5436 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.456627 sshd[5433]: pam_unix(sshd:session): session closed for user core Jul 2 07:49:58.462000 audit[5433]: USER_END pid=5433 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.465202 systemd-logind[1720]: Session 27 logged out. Waiting for processes to exit. Jul 2 07:49:58.466988 systemd[1]: sshd@26-172.31.20.37:22-139.178.89.65:37052.service: Deactivated successfully. Jul 2 07:49:58.468445 kernel: audit: type=1106 audit(1719906598.462:1449): pid=5433 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.467985 systemd[1]: session-27.scope: Deactivated successfully. Jul 2 07:49:58.462000 audit[5433]: CRED_DISP pid=5433 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.473583 kernel: audit: type=1104 audit(1719906598.462:1450): pid=5433 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:49:58.470007 systemd-logind[1720]: Removed session 27. Jul 2 07:49:58.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.20.37:22-139.178.89.65:37052 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:50:03.481401 systemd[1]: Started sshd@27-172.31.20.37:22-139.178.89.65:55602.service. Jul 2 07:50:03.491069 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:50:03.491139 kernel: audit: type=1130 audit(1719906603.481:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.37:22-139.178.89.65:55602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:50:03.481000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.37:22-139.178.89.65:55602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:50:03.644000 audit[5460]: USER_ACCT pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.646023 sshd[5460]: Accepted publickey for core from 139.178.89.65 port 55602 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:50:03.653363 kernel: audit: type=1101 audit(1719906603.644:1453): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.653491 kernel: audit: type=1103 audit(1719906603.649:1454): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.649000 audit[5460]: CRED_ACQ pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.651153 sshd[5460]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:50:03.657487 kernel: audit: type=1006 audit(1719906603.650:1455): pid=5460 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Jul 2 07:50:03.650000 audit[5460]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec9544600 a2=3 a3=0 items=0 ppid=1 pid=5460 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:50:03.662038 kernel: audit: type=1300 audit(1719906603.650:1455): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec9544600 a2=3 a3=0 items=0 ppid=1 pid=5460 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:50:03.650000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:50:03.663927 kernel: audit: type=1327 audit(1719906603.650:1455): proctitle=737368643A20636F7265205B707269765D Jul 2 07:50:03.667307 systemd[1]: Started session-28.scope. Jul 2 07:50:03.668036 systemd-logind[1720]: New session 28 of user core. Jul 2 07:50:03.683149 kernel: audit: type=1105 audit(1719906603.674:1456): pid=5460 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.674000 audit[5460]: USER_START pid=5460 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.682000 audit[5463]: CRED_ACQ pid=5463 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.688362 kernel: audit: type=1103 audit(1719906603.682:1457): pid=5463 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.890913 sshd[5460]: pam_unix(sshd:session): session closed for user core Jul 2 07:50:03.892000 audit[5460]: USER_END pid=5460 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.895862 systemd-logind[1720]: Session 28 logged out. Waiting for processes to exit. Jul 2 07:50:03.893000 audit[5460]: CRED_DISP pid=5460 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.897634 systemd[1]: sshd@27-172.31.20.37:22-139.178.89.65:55602.service: Deactivated successfully. Jul 2 07:50:03.898686 systemd[1]: session-28.scope: Deactivated successfully. Jul 2 07:50:03.900917 systemd-logind[1720]: Removed session 28. Jul 2 07:50:03.903519 kernel: audit: type=1106 audit(1719906603.892:1458): pid=5460 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.903618 kernel: audit: type=1104 audit(1719906603.893:1459): pid=5460 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:50:03.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.20.37:22-139.178.89.65:55602 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'