Jul 2 07:56:25.150631 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 1 23:45:21 -00 2024 Jul 2 07:56:25.150668 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:56:25.150683 kernel: BIOS-provided physical RAM map: Jul 2 07:56:25.150693 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 2 07:56:25.150704 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 2 07:56:25.150713 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 2 07:56:25.150728 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Jul 2 07:56:25.150738 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Jul 2 07:56:25.150750 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Jul 2 07:56:25.150761 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 2 07:56:25.150772 kernel: NX (Execute Disable) protection: active Jul 2 07:56:25.150784 kernel: SMBIOS 2.7 present. Jul 2 07:56:25.150795 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Jul 2 07:56:25.150807 kernel: Hypervisor detected: KVM Jul 2 07:56:25.151128 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 2 07:56:25.151185 kernel: kvm-clock: cpu 0, msr 13192001, primary cpu clock Jul 2 07:56:25.151199 kernel: kvm-clock: using sched offset of 6705648335 cycles Jul 2 07:56:25.151309 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 2 07:56:25.151362 kernel: tsc: Detected 2500.004 MHz processor Jul 2 07:56:25.151375 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 2 07:56:25.151391 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 2 07:56:25.151454 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Jul 2 07:56:25.151467 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 2 07:56:25.151480 kernel: Using GB pages for direct mapping Jul 2 07:56:25.151611 kernel: ACPI: Early table checksum verification disabled Jul 2 07:56:25.151626 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Jul 2 07:56:25.151638 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Jul 2 07:56:25.151652 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Jul 2 07:56:25.151664 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Jul 2 07:56:25.151682 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Jul 2 07:56:25.151696 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Jul 2 07:56:25.151709 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Jul 2 07:56:25.151723 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Jul 2 07:56:25.151735 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Jul 2 07:56:25.151747 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Jul 2 07:56:25.151763 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Jul 2 07:56:25.151775 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Jul 2 07:56:25.151792 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Jul 2 07:56:25.151884 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Jul 2 07:56:25.151899 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Jul 2 07:56:25.151919 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Jul 2 07:56:25.151934 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Jul 2 07:56:25.151948 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Jul 2 07:56:25.151972 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Jul 2 07:56:25.151988 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Jul 2 07:56:25.152002 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Jul 2 07:56:25.152024 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Jul 2 07:56:25.152038 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 2 07:56:25.152052 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Jul 2 07:56:25.152066 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Jul 2 07:56:25.152202 kernel: NUMA: Initialized distance table, cnt=1 Jul 2 07:56:25.152219 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Jul 2 07:56:25.152237 kernel: Zone ranges: Jul 2 07:56:25.152249 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 2 07:56:25.152263 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Jul 2 07:56:25.152276 kernel: Normal empty Jul 2 07:56:25.152290 kernel: Movable zone start for each node Jul 2 07:56:25.152305 kernel: Early memory node ranges Jul 2 07:56:25.152319 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 2 07:56:25.152486 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Jul 2 07:56:25.152505 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Jul 2 07:56:25.152525 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 07:56:25.152540 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 2 07:56:25.152553 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Jul 2 07:56:25.152566 kernel: ACPI: PM-Timer IO Port: 0xb008 Jul 2 07:56:25.152579 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 2 07:56:25.152593 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Jul 2 07:56:25.152607 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 2 07:56:25.152622 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 2 07:56:25.152636 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 2 07:56:25.152654 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 2 07:56:25.152728 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 2 07:56:25.152747 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 2 07:56:25.152761 kernel: TSC deadline timer available Jul 2 07:56:25.152774 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Jul 2 07:56:25.152786 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Jul 2 07:56:25.152799 kernel: Booting paravirtualized kernel on KVM Jul 2 07:56:25.152814 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 2 07:56:25.152829 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Jul 2 07:56:25.152846 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Jul 2 07:56:25.152891 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Jul 2 07:56:25.152905 kernel: pcpu-alloc: [0] 0 1 Jul 2 07:56:25.152918 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Jul 2 07:56:25.152932 kernel: kvm-guest: PV spinlocks enabled Jul 2 07:56:25.153044 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 2 07:56:25.153064 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Jul 2 07:56:25.153079 kernel: Policy zone: DMA32 Jul 2 07:56:25.153097 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:56:25.153116 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 07:56:25.153131 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 07:56:25.153145 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 2 07:56:25.153160 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 07:56:25.153175 kernel: Memory: 1934420K/2057760K available (12294K kernel code, 2276K rwdata, 13712K rodata, 47444K init, 4144K bss, 123080K reserved, 0K cma-reserved) Jul 2 07:56:25.153189 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 2 07:56:25.153202 kernel: Kernel/User page tables isolation: enabled Jul 2 07:56:25.153213 kernel: ftrace: allocating 34514 entries in 135 pages Jul 2 07:56:25.153227 kernel: ftrace: allocated 135 pages with 4 groups Jul 2 07:56:25.153241 kernel: rcu: Hierarchical RCU implementation. Jul 2 07:56:25.153256 kernel: rcu: RCU event tracing is enabled. Jul 2 07:56:25.153270 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 2 07:56:25.153285 kernel: Rude variant of Tasks RCU enabled. Jul 2 07:56:25.153301 kernel: Tracing variant of Tasks RCU enabled. Jul 2 07:56:25.153317 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 07:56:25.153332 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 2 07:56:25.153348 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Jul 2 07:56:25.153366 kernel: random: crng init done Jul 2 07:56:25.153382 kernel: Console: colour VGA+ 80x25 Jul 2 07:56:25.153397 kernel: printk: console [ttyS0] enabled Jul 2 07:56:25.153412 kernel: ACPI: Core revision 20210730 Jul 2 07:56:25.153426 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Jul 2 07:56:25.153441 kernel: APIC: Switch to symmetric I/O mode setup Jul 2 07:56:25.153455 kernel: x2apic enabled Jul 2 07:56:25.153470 kernel: Switched APIC routing to physical x2apic. Jul 2 07:56:25.153484 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093d6e846, max_idle_ns: 440795249997 ns Jul 2 07:56:25.153499 kernel: Calibrating delay loop (skipped) preset value.. 5000.00 BogoMIPS (lpj=2500004) Jul 2 07:56:25.153516 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 2 07:56:25.153529 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Jul 2 07:56:25.153544 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 2 07:56:25.153570 kernel: Spectre V2 : Mitigation: Retpolines Jul 2 07:56:25.153588 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Jul 2 07:56:25.153603 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Jul 2 07:56:25.153619 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Jul 2 07:56:25.153634 kernel: RETBleed: Vulnerable Jul 2 07:56:25.153648 kernel: Speculative Store Bypass: Vulnerable Jul 2 07:56:25.153662 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Jul 2 07:56:25.153734 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 2 07:56:25.153749 kernel: GDS: Unknown: Dependent on hypervisor status Jul 2 07:56:25.153764 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 2 07:56:25.153782 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 2 07:56:25.153797 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 2 07:56:25.153811 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Jul 2 07:56:25.153826 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Jul 2 07:56:25.153841 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Jul 2 07:56:25.153873 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Jul 2 07:56:25.153892 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Jul 2 07:56:25.153907 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Jul 2 07:56:25.153921 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 2 07:56:25.153936 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Jul 2 07:56:25.153951 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Jul 2 07:56:25.153966 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Jul 2 07:56:25.153981 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Jul 2 07:56:25.153995 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Jul 2 07:56:25.154010 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Jul 2 07:56:25.154026 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Jul 2 07:56:25.154041 kernel: Freeing SMP alternatives memory: 32K Jul 2 07:56:25.154059 kernel: pid_max: default: 32768 minimum: 301 Jul 2 07:56:25.154075 kernel: LSM: Security Framework initializing Jul 2 07:56:25.154090 kernel: SELinux: Initializing. Jul 2 07:56:25.154106 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 07:56:25.154184 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 07:56:25.154200 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Jul 2 07:56:25.154216 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Jul 2 07:56:25.154232 kernel: signal: max sigframe size: 3632 Jul 2 07:56:25.154248 kernel: rcu: Hierarchical SRCU implementation. Jul 2 07:56:25.154263 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 2 07:56:25.154278 kernel: smp: Bringing up secondary CPUs ... Jul 2 07:56:25.154296 kernel: x86: Booting SMP configuration: Jul 2 07:56:25.154311 kernel: .... node #0, CPUs: #1 Jul 2 07:56:25.154326 kernel: kvm-clock: cpu 1, msr 13192041, secondary cpu clock Jul 2 07:56:25.154341 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Jul 2 07:56:25.154358 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Jul 2 07:56:25.154374 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Jul 2 07:56:25.154389 kernel: smp: Brought up 1 node, 2 CPUs Jul 2 07:56:25.154404 kernel: smpboot: Max logical packages: 1 Jul 2 07:56:25.154422 kernel: smpboot: Total of 2 processors activated (10000.01 BogoMIPS) Jul 2 07:56:25.154437 kernel: devtmpfs: initialized Jul 2 07:56:25.154453 kernel: x86/mm: Memory block size: 128MB Jul 2 07:56:25.154469 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 07:56:25.154486 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 2 07:56:25.154501 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 07:56:25.154517 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 07:56:25.154532 kernel: audit: initializing netlink subsys (disabled) Jul 2 07:56:25.154549 kernel: audit: type=2000 audit(1719906984.957:1): state=initialized audit_enabled=0 res=1 Jul 2 07:56:25.154566 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 07:56:25.154649 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 2 07:56:25.154666 kernel: cpuidle: using governor menu Jul 2 07:56:25.154682 kernel: ACPI: bus type PCI registered Jul 2 07:56:25.154697 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 07:56:25.154712 kernel: dca service started, version 1.12.1 Jul 2 07:56:25.154727 kernel: PCI: Using configuration type 1 for base access Jul 2 07:56:25.154742 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 2 07:56:25.154758 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 2 07:56:25.154925 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 07:56:25.154942 kernel: ACPI: Added _OSI(Module Device) Jul 2 07:56:25.154956 kernel: ACPI: Added _OSI(Processor Device) Jul 2 07:56:25.154972 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 07:56:25.154989 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 07:56:25.155005 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 07:56:25.155019 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 07:56:25.155247 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 07:56:25.155262 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Jul 2 07:56:25.155281 kernel: ACPI: Interpreter enabled Jul 2 07:56:25.155296 kernel: ACPI: PM: (supports S0 S5) Jul 2 07:56:25.155311 kernel: ACPI: Using IOAPIC for interrupt routing Jul 2 07:56:25.155326 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 2 07:56:25.155341 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Jul 2 07:56:25.155356 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 2 07:56:25.155659 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Jul 2 07:56:25.155807 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Jul 2 07:56:25.155833 kernel: acpiphp: Slot [3] registered Jul 2 07:56:25.155849 kernel: acpiphp: Slot [4] registered Jul 2 07:56:25.155877 kernel: acpiphp: Slot [5] registered Jul 2 07:56:25.155892 kernel: acpiphp: Slot [6] registered Jul 2 07:56:25.155907 kernel: acpiphp: Slot [7] registered Jul 2 07:56:25.155922 kernel: acpiphp: Slot [8] registered Jul 2 07:56:25.155938 kernel: acpiphp: Slot [9] registered Jul 2 07:56:25.155953 kernel: acpiphp: Slot [10] registered Jul 2 07:56:25.155968 kernel: acpiphp: Slot [11] registered Jul 2 07:56:25.155987 kernel: acpiphp: Slot [12] registered Jul 2 07:56:25.156001 kernel: acpiphp: Slot [13] registered Jul 2 07:56:25.156024 kernel: acpiphp: Slot [14] registered Jul 2 07:56:25.156038 kernel: acpiphp: Slot [15] registered Jul 2 07:56:25.156052 kernel: acpiphp: Slot [16] registered Jul 2 07:56:25.156067 kernel: acpiphp: Slot [17] registered Jul 2 07:56:25.156082 kernel: acpiphp: Slot [18] registered Jul 2 07:56:25.156096 kernel: acpiphp: Slot [19] registered Jul 2 07:56:25.156111 kernel: acpiphp: Slot [20] registered Jul 2 07:56:25.156130 kernel: acpiphp: Slot [21] registered Jul 2 07:56:25.156145 kernel: acpiphp: Slot [22] registered Jul 2 07:56:25.156160 kernel: acpiphp: Slot [23] registered Jul 2 07:56:25.156175 kernel: acpiphp: Slot [24] registered Jul 2 07:56:25.156190 kernel: acpiphp: Slot [25] registered Jul 2 07:56:25.156205 kernel: acpiphp: Slot [26] registered Jul 2 07:56:25.156220 kernel: acpiphp: Slot [27] registered Jul 2 07:56:25.156235 kernel: acpiphp: Slot [28] registered Jul 2 07:56:25.156250 kernel: acpiphp: Slot [29] registered Jul 2 07:56:25.156265 kernel: acpiphp: Slot [30] registered Jul 2 07:56:25.156283 kernel: acpiphp: Slot [31] registered Jul 2 07:56:25.156295 kernel: PCI host bridge to bus 0000:00 Jul 2 07:56:25.156429 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 2 07:56:25.156608 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 2 07:56:25.156790 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 2 07:56:25.156917 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Jul 2 07:56:25.157024 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 2 07:56:25.157180 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Jul 2 07:56:25.157319 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Jul 2 07:56:25.157450 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Jul 2 07:56:25.157571 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Jul 2 07:56:25.157692 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Jul 2 07:56:25.157811 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Jul 2 07:56:25.157944 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Jul 2 07:56:25.158075 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Jul 2 07:56:25.158202 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Jul 2 07:56:25.158326 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Jul 2 07:56:25.158452 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Jul 2 07:56:25.158587 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Jul 2 07:56:25.158713 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Jul 2 07:56:25.158841 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Jul 2 07:56:25.159145 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 2 07:56:25.159283 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Jul 2 07:56:25.159411 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Jul 2 07:56:25.159608 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Jul 2 07:56:25.159740 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Jul 2 07:56:25.159759 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 2 07:56:25.159902 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 2 07:56:25.159919 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 2 07:56:25.159934 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 2 07:56:25.159949 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jul 2 07:56:25.159964 kernel: iommu: Default domain type: Translated Jul 2 07:56:25.159979 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 2 07:56:25.160127 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Jul 2 07:56:25.160258 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 2 07:56:25.160387 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Jul 2 07:56:25.160410 kernel: vgaarb: loaded Jul 2 07:56:25.160426 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 07:56:25.160441 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 07:56:25.160456 kernel: PTP clock support registered Jul 2 07:56:25.160472 kernel: PCI: Using ACPI for IRQ routing Jul 2 07:56:25.160487 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 2 07:56:25.160502 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 2 07:56:25.160517 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Jul 2 07:56:25.160533 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Jul 2 07:56:25.160551 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Jul 2 07:56:25.160566 kernel: clocksource: Switched to clocksource kvm-clock Jul 2 07:56:25.160580 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 07:56:25.160595 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 07:56:25.160610 kernel: pnp: PnP ACPI init Jul 2 07:56:25.160625 kernel: pnp: PnP ACPI: found 5 devices Jul 2 07:56:25.160640 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 2 07:56:25.160655 kernel: NET: Registered PF_INET protocol family Jul 2 07:56:25.160745 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 07:56:25.160762 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 2 07:56:25.160778 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 07:56:25.160793 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 2 07:56:25.160807 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 2 07:56:25.160915 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 2 07:56:25.160930 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 07:56:25.160945 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 07:56:25.160959 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 07:56:25.161090 kernel: NET: Registered PF_XDP protocol family Jul 2 07:56:25.161290 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 2 07:56:25.161416 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 2 07:56:25.161604 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 2 07:56:25.161726 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Jul 2 07:56:25.161875 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 2 07:56:25.162141 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Jul 2 07:56:25.162163 kernel: PCI: CLS 0 bytes, default 64 Jul 2 07:56:25.162182 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 2 07:56:25.162195 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093d6e846, max_idle_ns: 440795249997 ns Jul 2 07:56:25.162209 kernel: clocksource: Switched to clocksource tsc Jul 2 07:56:25.162224 kernel: Initialise system trusted keyrings Jul 2 07:56:25.162302 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 2 07:56:25.162320 kernel: Key type asymmetric registered Jul 2 07:56:25.162335 kernel: Asymmetric key parser 'x509' registered Jul 2 07:56:25.162349 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 07:56:25.162368 kernel: io scheduler mq-deadline registered Jul 2 07:56:25.162383 kernel: io scheduler kyber registered Jul 2 07:56:25.162398 kernel: io scheduler bfq registered Jul 2 07:56:25.162412 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 2 07:56:25.162427 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 07:56:25.162442 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 2 07:56:25.162457 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 2 07:56:25.162471 kernel: i8042: Warning: Keylock active Jul 2 07:56:25.162486 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 2 07:56:25.162501 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 2 07:56:25.162880 kernel: rtc_cmos 00:00: RTC can wake from S4 Jul 2 07:56:25.163247 kernel: rtc_cmos 00:00: registered as rtc0 Jul 2 07:56:25.163374 kernel: rtc_cmos 00:00: setting system clock to 2024-07-02T07:56:24 UTC (1719906984) Jul 2 07:56:25.163579 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Jul 2 07:56:25.163602 kernel: intel_pstate: CPU model not supported Jul 2 07:56:25.163618 kernel: NET: Registered PF_INET6 protocol family Jul 2 07:56:25.163634 kernel: Segment Routing with IPv6 Jul 2 07:56:25.163653 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 07:56:25.163669 kernel: NET: Registered PF_PACKET protocol family Jul 2 07:56:25.163684 kernel: Key type dns_resolver registered Jul 2 07:56:25.163700 kernel: IPI shorthand broadcast: enabled Jul 2 07:56:25.163715 kernel: sched_clock: Marking stable (477028597, 214498133)->(833378804, -141852074) Jul 2 07:56:25.163730 kernel: registered taskstats version 1 Jul 2 07:56:25.163744 kernel: Loading compiled-in X.509 certificates Jul 2 07:56:25.163760 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: a1ce693884775675566f1ed116e36d15950b9a42' Jul 2 07:56:25.163775 kernel: Key type .fscrypt registered Jul 2 07:56:25.163793 kernel: Key type fscrypt-provisioning registered Jul 2 07:56:25.163809 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 07:56:25.163824 kernel: ima: Allocated hash algorithm: sha1 Jul 2 07:56:25.163840 kernel: ima: No architecture policies found Jul 2 07:56:25.163868 kernel: clk: Disabling unused clocks Jul 2 07:56:25.163884 kernel: Freeing unused kernel image (initmem) memory: 47444K Jul 2 07:56:25.163899 kernel: Write protecting the kernel read-only data: 28672k Jul 2 07:56:25.163914 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 2 07:56:25.163930 kernel: Freeing unused kernel image (rodata/data gap) memory: 624K Jul 2 07:56:25.163948 kernel: Run /init as init process Jul 2 07:56:25.163963 kernel: with arguments: Jul 2 07:56:25.163978 kernel: /init Jul 2 07:56:25.163992 kernel: with environment: Jul 2 07:56:25.164109 kernel: HOME=/ Jul 2 07:56:25.164126 kernel: TERM=linux Jul 2 07:56:25.164142 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 07:56:25.164162 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:56:25.164321 systemd[1]: Detected virtualization amazon. Jul 2 07:56:25.164342 systemd[1]: Detected architecture x86-64. Jul 2 07:56:25.164358 systemd[1]: Running in initrd. Jul 2 07:56:25.164374 systemd[1]: No hostname configured, using default hostname. Jul 2 07:56:25.164406 systemd[1]: Hostname set to . Jul 2 07:56:25.164426 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:56:25.164512 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 2 07:56:25.164528 systemd[1]: Queued start job for default target initrd.target. Jul 2 07:56:25.164543 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:56:25.164559 systemd[1]: Reached target cryptsetup.target. Jul 2 07:56:25.164644 systemd[1]: Reached target paths.target. Jul 2 07:56:25.164664 systemd[1]: Reached target slices.target. Jul 2 07:56:25.164748 systemd[1]: Reached target swap.target. Jul 2 07:56:25.164764 systemd[1]: Reached target timers.target. Jul 2 07:56:25.164785 systemd[1]: Listening on iscsid.socket. Jul 2 07:56:25.164802 systemd[1]: Listening on iscsiuio.socket. Jul 2 07:56:25.164818 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 07:56:25.164835 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 07:56:25.164864 systemd[1]: Listening on systemd-journald.socket. Jul 2 07:56:25.164880 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:56:25.164896 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:56:25.164912 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:56:25.164930 systemd[1]: Reached target sockets.target. Jul 2 07:56:25.164946 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:56:25.164962 systemd[1]: Finished network-cleanup.service. Jul 2 07:56:25.164979 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 07:56:25.164995 systemd[1]: Starting systemd-journald.service... Jul 2 07:56:25.165011 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:56:25.165028 systemd[1]: Starting systemd-resolved.service... Jul 2 07:56:25.165051 systemd-journald[185]: Journal started Jul 2 07:56:25.165135 systemd-journald[185]: Runtime Journal (/run/log/journal/ec21433120b16426e8f88f51f0defc0a) is 4.8M, max 38.7M, 33.9M free. Jul 2 07:56:25.168934 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 07:56:25.177881 systemd[1]: Started systemd-journald.service. Jul 2 07:56:25.178929 systemd-modules-load[186]: Inserted module 'overlay' Jul 2 07:56:25.187331 kernel: audit: type=1130 audit(1719906985.181:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.187192 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:56:25.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.199969 kernel: audit: type=1130 audit(1719906985.192:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.200372 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 07:56:25.217003 kernel: audit: type=1130 audit(1719906985.207:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.217426 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 07:56:25.403011 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 07:56:25.403060 kernel: Bridge firewalling registered Jul 2 07:56:25.403082 kernel: SCSI subsystem initialized Jul 2 07:56:25.403106 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 07:56:25.403127 kernel: device-mapper: uevent: version 1.0.3 Jul 2 07:56:25.403144 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 07:56:25.256534 systemd-modules-load[186]: Inserted module 'br_netfilter' Jul 2 07:56:25.408946 kernel: audit: type=1130 audit(1719906985.402:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.283429 systemd-resolved[187]: Positive Trust Anchors: Jul 2 07:56:25.419387 kernel: audit: type=1130 audit(1719906985.408:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.419438 kernel: audit: type=1130 audit(1719906985.413:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.283441 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:56:25.425685 kernel: audit: type=1130 audit(1719906985.418:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.283497 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:56:25.292479 systemd-resolved[187]: Defaulting to hostname 'linux'. Jul 2 07:56:25.309973 systemd-modules-load[186]: Inserted module 'dm_multipath' Jul 2 07:56:25.401986 systemd[1]: Started systemd-resolved.service. Jul 2 07:56:25.403414 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:56:25.409259 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 07:56:25.414403 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 07:56:25.419619 systemd[1]: Reached target nss-lookup.target. Jul 2 07:56:25.426748 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 07:56:25.442918 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:56:25.469677 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:56:25.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.474886 kernel: audit: type=1130 audit(1719906985.468:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.482142 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 07:56:25.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.492298 kernel: audit: type=1130 audit(1719906985.482:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.487192 systemd[1]: Starting dracut-cmdline.service... Jul 2 07:56:25.512888 dracut-cmdline[206]: dracut-dracut-053 Jul 2 07:56:25.516317 dracut-cmdline[206]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:56:25.614614 kernel: Loading iSCSI transport class v2.0-870. Jul 2 07:56:25.642902 kernel: iscsi: registered transport (tcp) Jul 2 07:56:25.675957 kernel: iscsi: registered transport (qla4xxx) Jul 2 07:56:25.676137 kernel: QLogic iSCSI HBA Driver Jul 2 07:56:25.735129 systemd[1]: Finished dracut-cmdline.service. Jul 2 07:56:25.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:25.738023 systemd[1]: Starting dracut-pre-udev.service... Jul 2 07:56:25.810022 kernel: raid6: avx512x4 gen() 12871 MB/s Jul 2 07:56:25.831187 kernel: raid6: avx512x4 xor() 5176 MB/s Jul 2 07:56:25.848905 kernel: raid6: avx512x2 gen() 3949 MB/s Jul 2 07:56:25.867918 kernel: raid6: avx512x2 xor() 12415 MB/s Jul 2 07:56:25.885416 kernel: raid6: avx512x1 gen() 12354 MB/s Jul 2 07:56:25.901906 kernel: raid6: avx512x1 xor() 14817 MB/s Jul 2 07:56:25.919960 kernel: raid6: avx2x4 gen() 10164 MB/s Jul 2 07:56:25.936911 kernel: raid6: avx2x4 xor() 3501 MB/s Jul 2 07:56:25.953899 kernel: raid6: avx2x2 gen() 11789 MB/s Jul 2 07:56:25.970923 kernel: raid6: avx2x2 xor() 12303 MB/s Jul 2 07:56:25.988921 kernel: raid6: avx2x1 gen() 7968 MB/s Jul 2 07:56:26.009911 kernel: raid6: avx2x1 xor() 10795 MB/s Jul 2 07:56:26.027909 kernel: raid6: sse2x4 gen() 4738 MB/s Jul 2 07:56:26.045957 kernel: raid6: sse2x4 xor() 4902 MB/s Jul 2 07:56:26.062919 kernel: raid6: sse2x2 gen() 8198 MB/s Jul 2 07:56:26.080981 kernel: raid6: sse2x2 xor() 4330 MB/s Jul 2 07:56:26.100405 kernel: raid6: sse2x1 gen() 5310 MB/s Jul 2 07:56:26.118691 kernel: raid6: sse2x1 xor() 2616 MB/s Jul 2 07:56:26.118769 kernel: raid6: using algorithm avx512x4 gen() 12871 MB/s Jul 2 07:56:26.118787 kernel: raid6: .... xor() 5176 MB/s, rmw enabled Jul 2 07:56:26.119578 kernel: raid6: using avx512x2 recovery algorithm Jul 2 07:56:26.136894 kernel: xor: automatically using best checksumming function avx Jul 2 07:56:26.260896 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 2 07:56:26.274228 systemd[1]: Finished dracut-pre-udev.service. Jul 2 07:56:26.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:26.275000 audit: BPF prog-id=7 op=LOAD Jul 2 07:56:26.276000 audit: BPF prog-id=8 op=LOAD Jul 2 07:56:26.277344 systemd[1]: Starting systemd-udevd.service... Jul 2 07:56:26.295964 systemd-udevd[385]: Using default interface naming scheme 'v252'. Jul 2 07:56:26.304178 systemd[1]: Started systemd-udevd.service. Jul 2 07:56:26.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:26.306810 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 07:56:26.336155 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Jul 2 07:56:26.473527 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 07:56:26.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:26.484450 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:56:26.547593 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:56:26.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:26.609879 kernel: cryptd: max_cpu_qlen set to 1000 Jul 2 07:56:26.637776 kernel: AVX2 version of gcm_enc/dec engaged. Jul 2 07:56:26.637870 kernel: AES CTR mode by8 optimization enabled Jul 2 07:56:26.643421 kernel: nvme nvme0: pci function 0000:00:04.0 Jul 2 07:56:26.643684 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Jul 2 07:56:26.650879 kernel: nvme nvme0: 2/0/0 default/read/poll queues Jul 2 07:56:26.652874 kernel: ena 0000:00:05.0: ENA device version: 0.10 Jul 2 07:56:26.653127 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Jul 2 07:56:26.656880 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 07:56:26.656942 kernel: GPT:9289727 != 16777215 Jul 2 07:56:26.656972 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 07:56:26.657013 kernel: GPT:9289727 != 16777215 Jul 2 07:56:26.657027 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 07:56:26.657042 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:56:26.657059 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Jul 2 07:56:26.661924 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:b9:19:86:60:bb Jul 2 07:56:26.661497 (udev-worker)[436]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:56:26.879404 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (432) Jul 2 07:56:26.920196 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:56:26.935844 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 07:56:26.959440 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 07:56:26.959583 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 07:56:26.979707 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 07:56:26.990744 systemd[1]: Starting disk-uuid.service... Jul 2 07:56:27.017380 disk-uuid[594]: Primary Header is updated. Jul 2 07:56:27.017380 disk-uuid[594]: Secondary Entries is updated. Jul 2 07:56:27.017380 disk-uuid[594]: Secondary Header is updated. Jul 2 07:56:27.023883 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:56:27.030875 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:56:27.037876 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:56:28.036932 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Jul 2 07:56:28.037001 disk-uuid[595]: The operation has completed successfully. Jul 2 07:56:28.230314 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 07:56:28.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.230433 systemd[1]: Finished disk-uuid.service. Jul 2 07:56:28.242546 systemd[1]: Starting verity-setup.service... Jul 2 07:56:28.271945 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 2 07:56:28.401277 systemd[1]: Found device dev-mapper-usr.device. Jul 2 07:56:28.405638 systemd[1]: Mounting sysusr-usr.mount... Jul 2 07:56:28.410056 systemd[1]: Finished verity-setup.service. Jul 2 07:56:28.411000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.565070 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 07:56:28.566108 systemd[1]: Mounted sysusr-usr.mount. Jul 2 07:56:28.566626 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 07:56:28.570760 systemd[1]: Starting ignition-setup.service... Jul 2 07:56:28.582328 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 07:56:28.616010 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:56:28.616082 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 07:56:28.616100 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 07:56:28.637879 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 07:56:28.652902 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 07:56:28.683740 systemd[1]: Finished ignition-setup.service. Jul 2 07:56:28.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.687008 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 07:56:28.689799 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 07:56:28.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.690000 audit: BPF prog-id=9 op=LOAD Jul 2 07:56:28.692343 systemd[1]: Starting systemd-networkd.service... Jul 2 07:56:28.745055 systemd-networkd[1107]: lo: Link UP Jul 2 07:56:28.745825 systemd-networkd[1107]: lo: Gained carrier Jul 2 07:56:28.747243 systemd-networkd[1107]: Enumeration completed Jul 2 07:56:28.747380 systemd[1]: Started systemd-networkd.service. Jul 2 07:56:28.748520 systemd-networkd[1107]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:56:28.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.754483 systemd[1]: Reached target network.target. Jul 2 07:56:28.756577 systemd[1]: Starting iscsiuio.service... Jul 2 07:56:28.759948 systemd-networkd[1107]: eth0: Link UP Jul 2 07:56:28.760096 systemd-networkd[1107]: eth0: Gained carrier Jul 2 07:56:28.766325 systemd[1]: Started iscsiuio.service. Jul 2 07:56:28.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.769500 systemd[1]: Starting iscsid.service... Jul 2 07:56:28.774865 iscsid[1113]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:56:28.774865 iscsid[1113]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 07:56:28.774865 iscsid[1113]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 07:56:28.774865 iscsid[1113]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 07:56:28.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.791574 iscsid[1113]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:56:28.791574 iscsid[1113]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 07:56:28.777249 systemd[1]: Started iscsid.service. Jul 2 07:56:28.783125 systemd-networkd[1107]: eth0: DHCPv4 address 172.31.21.43/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 2 07:56:28.799604 systemd[1]: Starting dracut-initqueue.service... Jul 2 07:56:28.818460 systemd[1]: Finished dracut-initqueue.service. Jul 2 07:56:28.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:28.819736 systemd[1]: Reached target remote-fs-pre.target. Jul 2 07:56:28.820922 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:56:28.823525 systemd[1]: Reached target remote-fs.target. Jul 2 07:56:28.828941 systemd[1]: Starting dracut-pre-mount.service... Jul 2 07:56:28.854085 systemd[1]: Finished dracut-pre-mount.service. Jul 2 07:56:28.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.196721 ignition[1105]: Ignition 2.14.0 Jul 2 07:56:29.196738 ignition[1105]: Stage: fetch-offline Jul 2 07:56:29.196905 ignition[1105]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:29.197044 ignition[1105]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:29.214572 ignition[1105]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:29.216286 ignition[1105]: Ignition finished successfully Jul 2 07:56:29.218126 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 07:56:29.231569 kernel: kauditd_printk_skb: 18 callbacks suppressed Jul 2 07:56:29.231604 kernel: audit: type=1130 audit(1719906989.219:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.221158 systemd[1]: Starting ignition-fetch.service... Jul 2 07:56:29.248493 ignition[1132]: Ignition 2.14.0 Jul 2 07:56:29.248507 ignition[1132]: Stage: fetch Jul 2 07:56:29.248969 ignition[1132]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:29.249033 ignition[1132]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:29.261424 ignition[1132]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:29.262802 ignition[1132]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:29.271118 ignition[1132]: INFO : PUT result: OK Jul 2 07:56:29.273706 ignition[1132]: DEBUG : parsed url from cmdline: "" Jul 2 07:56:29.273706 ignition[1132]: INFO : no config URL provided Jul 2 07:56:29.273706 ignition[1132]: INFO : reading system config file "/usr/lib/ignition/user.ign" Jul 2 07:56:29.273706 ignition[1132]: INFO : no config at "/usr/lib/ignition/user.ign" Jul 2 07:56:29.278912 ignition[1132]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:29.278912 ignition[1132]: INFO : PUT result: OK Jul 2 07:56:29.278912 ignition[1132]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Jul 2 07:56:29.278912 ignition[1132]: INFO : GET result: OK Jul 2 07:56:29.287157 ignition[1132]: DEBUG : parsing config with SHA512: 21e47b17f7e2e84bf1ac88105085bca34550f2202d7e544ce545636ed62e2fa3325a05ce636638bd399a6938458abc124fd224e4d3b8cb1067006ba982e8fbf9 Jul 2 07:56:29.295366 unknown[1132]: fetched base config from "system" Jul 2 07:56:29.295382 unknown[1132]: fetched base config from "system" Jul 2 07:56:29.297228 ignition[1132]: fetch: fetch complete Jul 2 07:56:29.295390 unknown[1132]: fetched user config from "aws" Jul 2 07:56:29.297237 ignition[1132]: fetch: fetch passed Jul 2 07:56:29.297301 ignition[1132]: Ignition finished successfully Jul 2 07:56:29.311482 systemd[1]: Finished ignition-fetch.service. Jul 2 07:56:29.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.318096 kernel: audit: type=1130 audit(1719906989.312:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.314203 systemd[1]: Starting ignition-kargs.service... Jul 2 07:56:29.331130 ignition[1138]: Ignition 2.14.0 Jul 2 07:56:29.331143 ignition[1138]: Stage: kargs Jul 2 07:56:29.331354 ignition[1138]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:29.331386 ignition[1138]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:29.344506 ignition[1138]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:29.348677 ignition[1138]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:29.351508 ignition[1138]: INFO : PUT result: OK Jul 2 07:56:29.356848 ignition[1138]: kargs: kargs passed Jul 2 07:56:29.356939 ignition[1138]: Ignition finished successfully Jul 2 07:56:29.361039 systemd[1]: Finished ignition-kargs.service. Jul 2 07:56:29.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.362352 systemd[1]: Starting ignition-disks.service... Jul 2 07:56:29.367310 kernel: audit: type=1130 audit(1719906989.360:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.378190 ignition[1144]: Ignition 2.14.0 Jul 2 07:56:29.378205 ignition[1144]: Stage: disks Jul 2 07:56:29.378930 ignition[1144]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:29.378966 ignition[1144]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:29.394309 ignition[1144]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:29.396468 ignition[1144]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:29.399238 ignition[1144]: INFO : PUT result: OK Jul 2 07:56:29.403237 ignition[1144]: disks: disks passed Jul 2 07:56:29.403480 ignition[1144]: Ignition finished successfully Jul 2 07:56:29.406047 systemd[1]: Finished ignition-disks.service. Jul 2 07:56:29.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.407559 systemd[1]: Reached target initrd-root-device.target. Jul 2 07:56:29.413507 kernel: audit: type=1130 audit(1719906989.407:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.413628 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:56:29.415500 systemd[1]: Reached target local-fs.target. Jul 2 07:56:29.417305 systemd[1]: Reached target sysinit.target. Jul 2 07:56:29.417448 systemd[1]: Reached target basic.target. Jul 2 07:56:29.422194 systemd[1]: Starting systemd-fsck-root.service... Jul 2 07:56:29.470904 systemd-fsck[1152]: ROOT: clean, 614/553520 files, 56020/553472 blocks Jul 2 07:56:29.479659 systemd[1]: Finished systemd-fsck-root.service. Jul 2 07:56:29.488798 kernel: audit: type=1130 audit(1719906989.479:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.489220 systemd[1]: Mounting sysroot.mount... Jul 2 07:56:29.513911 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 07:56:29.516766 systemd[1]: Mounted sysroot.mount. Jul 2 07:56:29.518780 systemd[1]: Reached target initrd-root-fs.target. Jul 2 07:56:29.533874 systemd[1]: Mounting sysroot-usr.mount... Jul 2 07:56:29.535948 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 07:56:29.536029 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 07:56:29.536073 systemd[1]: Reached target ignition-diskful.target. Jul 2 07:56:29.539557 systemd[1]: Mounted sysroot-usr.mount. Jul 2 07:56:29.564528 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 07:56:29.576708 systemd[1]: Starting initrd-setup-root.service... Jul 2 07:56:29.585492 initrd-setup-root[1174]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 07:56:29.590915 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1169) Jul 2 07:56:29.595029 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:56:29.595085 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 07:56:29.595098 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 07:56:29.599876 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 07:56:29.603023 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 07:56:29.606521 initrd-setup-root[1200]: cut: /sysroot/etc/group: No such file or directory Jul 2 07:56:29.613235 initrd-setup-root[1208]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 07:56:29.618985 initrd-setup-root[1216]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 07:56:29.764644 systemd[1]: Finished initrd-setup-root.service. Jul 2 07:56:29.774158 kernel: audit: type=1130 audit(1719906989.764:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.767097 systemd[1]: Starting ignition-mount.service... Jul 2 07:56:29.777299 systemd[1]: Starting sysroot-boot.service... Jul 2 07:56:29.782336 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 2 07:56:29.783558 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 2 07:56:29.833562 ignition[1235]: INFO : Ignition 2.14.0 Jul 2 07:56:29.833562 ignition[1235]: INFO : Stage: mount Jul 2 07:56:29.842817 ignition[1235]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:29.842817 ignition[1235]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:29.842075 systemd[1]: Finished sysroot-boot.service. Jul 2 07:56:29.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.859817 ignition[1235]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:29.862120 kernel: audit: type=1130 audit(1719906989.854:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.862156 ignition[1235]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:29.867715 ignition[1235]: INFO : PUT result: OK Jul 2 07:56:29.871801 ignition[1235]: INFO : mount: mount passed Jul 2 07:56:29.872830 ignition[1235]: INFO : Ignition finished successfully Jul 2 07:56:29.874616 systemd[1]: Finished ignition-mount.service. Jul 2 07:56:29.880336 kernel: audit: type=1130 audit(1719906989.875:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:29.880579 systemd[1]: Starting ignition-files.service... Jul 2 07:56:29.889108 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 07:56:29.910887 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1244) Jul 2 07:56:29.910950 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:56:29.915643 kernel: BTRFS info (device nvme0n1p6): using free space tree Jul 2 07:56:29.915718 kernel: BTRFS info (device nvme0n1p6): has skinny extents Jul 2 07:56:29.923879 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Jul 2 07:56:29.927648 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 07:56:29.955341 ignition[1263]: INFO : Ignition 2.14.0 Jul 2 07:56:29.955341 ignition[1263]: INFO : Stage: files Jul 2 07:56:29.957996 ignition[1263]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:29.957996 ignition[1263]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:29.972110 ignition[1263]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:29.973983 ignition[1263]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:29.976041 ignition[1263]: INFO : PUT result: OK Jul 2 07:56:29.980656 ignition[1263]: DEBUG : files: compiled without relabeling support, skipping Jul 2 07:56:29.988659 ignition[1263]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 07:56:29.988659 ignition[1263]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 07:56:29.992907 ignition[1263]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 07:56:29.997187 systemd-networkd[1107]: eth0: Gained IPv6LL Jul 2 07:56:30.000546 ignition[1263]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 07:56:30.003815 unknown[1263]: wrote ssh authorized keys file for user: core Jul 2 07:56:30.007051 ignition[1263]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 07:56:30.009413 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:56:30.009413 ignition[1263]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 2 07:56:30.067700 ignition[1263]: INFO : GET result: OK Jul 2 07:56:30.191966 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:56:30.191966 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 2 07:56:30.197348 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:56:30.207272 ignition[1263]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2460730088" Jul 2 07:56:30.210109 ignition[1263]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2460730088": device or resource busy Jul 2 07:56:30.210109 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2460730088", trying btrfs: device or resource busy Jul 2 07:56:30.210109 ignition[1263]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2460730088" Jul 2 07:56:30.218094 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1266) Jul 2 07:56:30.218130 ignition[1263]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2460730088" Jul 2 07:56:30.229437 ignition[1263]: INFO : op(3): [started] unmounting "/mnt/oem2460730088" Jul 2 07:56:30.231421 ignition[1263]: INFO : op(3): [finished] unmounting "/mnt/oem2460730088" Jul 2 07:56:30.231421 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Jul 2 07:56:30.231421 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" Jul 2 07:56:30.237256 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 07:56:30.237256 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:56:30.237256 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:56:30.237256 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:56:30.237256 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:56:30.237256 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:56:30.248708 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:56:30.248708 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:56:30.248708 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:56:30.248708 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.28.7-x86-64.raw" Jul 2 07:56:30.248708 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.28.7-x86-64.raw" Jul 2 07:56:30.248708 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 2 07:56:30.248708 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:56:30.268741 ignition[1263]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1279008662" Jul 2 07:56:30.268741 ignition[1263]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1279008662": device or resource busy Jul 2 07:56:30.268741 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1279008662", trying btrfs: device or resource busy Jul 2 07:56:30.268741 ignition[1263]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1279008662" Jul 2 07:56:30.268741 ignition[1263]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1279008662" Jul 2 07:56:30.268741 ignition[1263]: INFO : op(6): [started] unmounting "/mnt/oem1279008662" Jul 2 07:56:30.281069 ignition[1263]: INFO : op(6): [finished] unmounting "/mnt/oem1279008662" Jul 2 07:56:30.281069 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Jul 2 07:56:30.281069 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 2 07:56:30.281069 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:56:30.296204 ignition[1263]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3972664336" Jul 2 07:56:30.298349 ignition[1263]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3972664336": device or resource busy Jul 2 07:56:30.298349 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3972664336", trying btrfs: device or resource busy Jul 2 07:56:30.298349 ignition[1263]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3972664336" Jul 2 07:56:30.306120 ignition[1263]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3972664336" Jul 2 07:56:30.306120 ignition[1263]: INFO : op(9): [started] unmounting "/mnt/oem3972664336" Jul 2 07:56:30.306120 ignition[1263]: INFO : op(9): [finished] unmounting "/mnt/oem3972664336" Jul 2 07:56:30.306120 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Jul 2 07:56:30.306120 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 07:56:30.306120 ignition[1263]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Jul 2 07:56:30.325572 ignition[1263]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2027145544" Jul 2 07:56:30.328387 ignition[1263]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2027145544": device or resource busy Jul 2 07:56:30.328387 ignition[1263]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2027145544", trying btrfs: device or resource busy Jul 2 07:56:30.328387 ignition[1263]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2027145544" Jul 2 07:56:30.358347 ignition[1263]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2027145544" Jul 2 07:56:30.358347 ignition[1263]: INFO : op(c): [started] unmounting "/mnt/oem2027145544" Jul 2 07:56:30.358347 ignition[1263]: INFO : op(c): [finished] unmounting "/mnt/oem2027145544" Jul 2 07:56:30.358347 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Jul 2 07:56:30.358347 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.28.7-x86-64.raw" Jul 2 07:56:30.358347 ignition[1263]: INFO : GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.28.7-x86-64.raw: attempt #1 Jul 2 07:56:30.813237 ignition[1263]: INFO : GET result: OK Jul 2 07:56:31.417567 ignition[1263]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.28.7-x86-64.raw" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(12): [started] processing unit "nvidia.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(12): [finished] processing unit "nvidia.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Jul 2 07:56:31.423894 ignition[1263]: INFO : files: op(15): [started] setting preset to enabled for "prepare-helm.service" Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(15): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(16): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(16): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(17): [started] setting preset to enabled for "amazon-ssm-agent.service" Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(17): [finished] setting preset to enabled for "amazon-ssm-agent.service" Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Jul 2 07:56:31.453996 ignition[1263]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Jul 2 07:56:31.481042 ignition[1263]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:56:31.481042 ignition[1263]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:56:31.481042 ignition[1263]: INFO : files: files passed Jul 2 07:56:31.481042 ignition[1263]: INFO : Ignition finished successfully Jul 2 07:56:31.500782 systemd[1]: Finished ignition-files.service. Jul 2 07:56:31.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.513959 kernel: audit: type=1130 audit(1719906991.505:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.523327 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 07:56:31.525615 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 07:56:31.529901 systemd[1]: Starting ignition-quench.service... Jul 2 07:56:31.546945 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 07:56:31.548729 systemd[1]: Finished ignition-quench.service. Jul 2 07:56:31.550000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.553235 initrd-setup-root-after-ignition[1288]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 07:56:31.558147 kernel: audit: type=1130 audit(1719906991.550:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.554658 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 07:56:31.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.558742 systemd[1]: Reached target ignition-complete.target. Jul 2 07:56:31.561839 systemd[1]: Starting initrd-parse-etc.service... Jul 2 07:56:31.589251 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 07:56:31.589380 systemd[1]: Finished initrd-parse-etc.service. Jul 2 07:56:31.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.593233 systemd[1]: Reached target initrd-fs.target. Jul 2 07:56:31.595236 systemd[1]: Reached target initrd.target. Jul 2 07:56:31.596836 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 07:56:31.599454 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 07:56:31.620574 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 07:56:31.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.624141 systemd[1]: Starting initrd-cleanup.service... Jul 2 07:56:31.639303 systemd[1]: Stopped target nss-lookup.target. Jul 2 07:56:31.639802 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 07:56:31.644386 systemd[1]: Stopped target timers.target. Jul 2 07:56:31.646093 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 07:56:31.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.646321 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 07:56:31.647841 systemd[1]: Stopped target initrd.target. Jul 2 07:56:31.651720 systemd[1]: Stopped target basic.target. Jul 2 07:56:31.653443 systemd[1]: Stopped target ignition-complete.target. Jul 2 07:56:31.655283 systemd[1]: Stopped target ignition-diskful.target. Jul 2 07:56:31.657442 systemd[1]: Stopped target initrd-root-device.target. Jul 2 07:56:31.659165 systemd[1]: Stopped target remote-fs.target. Jul 2 07:56:31.664090 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 07:56:31.665303 systemd[1]: Stopped target sysinit.target. Jul 2 07:56:31.666352 systemd[1]: Stopped target local-fs.target. Jul 2 07:56:31.669506 systemd[1]: Stopped target local-fs-pre.target. Jul 2 07:56:31.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.672007 systemd[1]: Stopped target swap.target. Jul 2 07:56:31.673020 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 07:56:31.673136 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 07:56:31.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.674222 systemd[1]: Stopped target cryptsetup.target. Jul 2 07:56:31.675208 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 07:56:31.675312 systemd[1]: Stopped dracut-initqueue.service. Jul 2 07:56:31.676585 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 07:56:31.676686 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 07:56:31.677957 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 07:56:31.745165 ignition[1301]: INFO : Ignition 2.14.0 Jul 2 07:56:31.745165 ignition[1301]: INFO : Stage: umount Jul 2 07:56:31.745165 ignition[1301]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 07:56:31.745165 ignition[1301]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Jul 2 07:56:31.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.758152 iscsid[1113]: iscsid shutting down. Jul 2 07:56:31.680299 systemd[1]: Stopped ignition-files.service. Jul 2 07:56:31.706313 systemd[1]: Stopping ignition-mount.service... Jul 2 07:56:31.744275 systemd[1]: Stopping iscsid.service... Jul 2 07:56:31.748909 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 07:56:31.749385 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 07:56:31.755257 systemd[1]: Stopping sysroot-boot.service... Jul 2 07:56:31.774819 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 07:56:31.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.775262 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 07:56:31.776677 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 07:56:31.776837 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 07:56:31.781284 ignition[1301]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Jul 2 07:56:31.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.789046 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 07:56:31.790524 ignition[1301]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Jul 2 07:56:31.789651 systemd[1]: Stopped iscsid.service. Jul 2 07:56:31.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.796681 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 07:56:31.797018 systemd[1]: Finished initrd-cleanup.service. Jul 2 07:56:31.799145 ignition[1301]: INFO : PUT result: OK Jul 2 07:56:31.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.805844 systemd[1]: Stopping iscsiuio.service... Jul 2 07:56:31.816535 ignition[1301]: INFO : umount: umount passed Jul 2 07:56:31.817652 ignition[1301]: INFO : Ignition finished successfully Jul 2 07:56:31.818618 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 07:56:31.818866 systemd[1]: Stopped ignition-mount.service. Jul 2 07:56:31.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.827440 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 07:56:31.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.827662 systemd[1]: Stopped iscsiuio.service. Jul 2 07:56:31.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.828664 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 07:56:31.828724 systemd[1]: Stopped ignition-disks.service. Jul 2 07:56:31.829919 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 07:56:31.829975 systemd[1]: Stopped ignition-kargs.service. Jul 2 07:56:31.831809 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 2 07:56:31.832006 systemd[1]: Stopped ignition-fetch.service. Jul 2 07:56:31.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.841893 systemd[1]: Stopped target network.target. Jul 2 07:56:31.843031 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 07:56:31.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.843118 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 07:56:31.847793 systemd[1]: Stopped target paths.target. Jul 2 07:56:31.850057 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 07:56:31.850212 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 07:56:31.853272 systemd[1]: Stopped target slices.target. Jul 2 07:56:31.859250 systemd[1]: Stopped target sockets.target. Jul 2 07:56:31.863919 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 07:56:31.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.863991 systemd[1]: Closed iscsid.socket. Jul 2 07:56:31.868733 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 07:56:31.868792 systemd[1]: Closed iscsiuio.socket. Jul 2 07:56:31.875698 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 07:56:31.875778 systemd[1]: Stopped ignition-setup.service. Jul 2 07:56:31.894744 systemd[1]: Stopping systemd-networkd.service... Jul 2 07:56:31.900447 systemd-networkd[1107]: eth0: DHCPv6 lease lost Jul 2 07:56:31.902249 systemd[1]: Stopping systemd-resolved.service... Jul 2 07:56:31.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.930640 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 07:56:31.933968 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 07:56:31.934156 systemd[1]: Stopped systemd-resolved.service. Jul 2 07:56:31.940000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.936761 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 07:56:31.936945 systemd[1]: Stopped systemd-networkd.service. Jul 2 07:56:31.943000 audit: BPF prog-id=9 op=UNLOAD Jul 2 07:56:31.944000 audit: BPF prog-id=6 op=UNLOAD Jul 2 07:56:31.944724 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 07:56:31.944950 systemd[1]: Closed systemd-networkd.socket. Jul 2 07:56:31.961667 systemd[1]: Stopping network-cleanup.service... Jul 2 07:56:31.970650 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 07:56:31.970869 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 07:56:31.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.981651 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 07:56:31.981727 systemd[1]: Stopped systemd-sysctl.service. Jul 2 07:56:31.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.989954 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 07:56:31.990035 systemd[1]: Stopped systemd-modules-load.service. Jul 2 07:56:31.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:31.996996 systemd[1]: Stopping systemd-udevd.service... Jul 2 07:56:32.012773 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 07:56:32.016814 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 07:56:32.018202 systemd[1]: Stopped sysroot-boot.service. Jul 2 07:56:32.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.020823 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 07:56:32.022926 systemd[1]: Stopped systemd-udevd.service. Jul 2 07:56:32.023000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.027748 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 07:56:32.027815 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 07:56:32.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.029222 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 07:56:32.029278 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 07:56:32.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.032347 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 07:56:32.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.032429 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 07:56:32.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.037097 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 07:56:32.037178 systemd[1]: Stopped dracut-cmdline.service. Jul 2 07:56:32.040739 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 07:56:32.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.040820 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 07:56:32.042151 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 07:56:32.043089 systemd[1]: Stopped initrd-setup-root.service. Jul 2 07:56:32.053015 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 07:56:32.054401 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 07:56:32.055312 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 07:56:32.059083 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 07:56:32.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.059262 systemd[1]: Stopped network-cleanup.service. Jul 2 07:56:32.073630 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 07:56:32.073810 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 07:56:32.076575 systemd[1]: Reached target initrd-switch-root.target. Jul 2 07:56:32.083314 systemd[1]: Starting initrd-switch-root.service... Jul 2 07:56:32.107979 systemd[1]: Switching root. Jul 2 07:56:32.136380 systemd-journald[185]: Journal stopped Jul 2 07:56:36.838926 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Jul 2 07:56:36.839010 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 07:56:36.839042 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 07:56:36.839062 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 07:56:36.839083 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 07:56:36.839109 kernel: SELinux: policy capability open_perms=1 Jul 2 07:56:36.839131 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 07:56:36.839156 kernel: SELinux: policy capability always_check_network=0 Jul 2 07:56:36.839177 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 07:56:36.839197 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 07:56:36.839218 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 07:56:36.839246 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 07:56:36.839269 systemd[1]: Successfully loaded SELinux policy in 89.174ms. Jul 2 07:56:36.839311 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 15.403ms. Jul 2 07:56:36.839335 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:56:36.839366 systemd[1]: Detected virtualization amazon. Jul 2 07:56:36.839388 systemd[1]: Detected architecture x86-64. Jul 2 07:56:36.839406 systemd[1]: Detected first boot. Jul 2 07:56:36.839424 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:56:36.839443 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 07:56:36.839461 systemd[1]: Populated /etc with preset unit settings. Jul 2 07:56:36.839482 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:56:36.839506 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:56:36.839534 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:56:36.839553 kernel: kauditd_printk_skb: 56 callbacks suppressed Jul 2 07:56:36.839570 kernel: audit: type=1334 audit(1719906996.560:88): prog-id=12 op=LOAD Jul 2 07:56:36.839588 kernel: audit: type=1334 audit(1719906996.560:89): prog-id=3 op=UNLOAD Jul 2 07:56:36.839605 kernel: audit: type=1334 audit(1719906996.561:90): prog-id=13 op=LOAD Jul 2 07:56:36.839622 kernel: audit: type=1334 audit(1719906996.562:91): prog-id=14 op=LOAD Jul 2 07:56:36.839647 kernel: audit: type=1334 audit(1719906996.562:92): prog-id=4 op=UNLOAD Jul 2 07:56:36.839666 kernel: audit: type=1334 audit(1719906996.562:93): prog-id=5 op=UNLOAD Jul 2 07:56:36.839683 kernel: audit: type=1334 audit(1719906996.565:94): prog-id=15 op=LOAD Jul 2 07:56:36.839701 kernel: audit: type=1334 audit(1719906996.565:95): prog-id=12 op=UNLOAD Jul 2 07:56:36.839719 kernel: audit: type=1334 audit(1719906996.566:96): prog-id=16 op=LOAD Jul 2 07:56:36.839737 kernel: audit: type=1334 audit(1719906996.567:97): prog-id=17 op=LOAD Jul 2 07:56:36.839756 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 07:56:36.839775 systemd[1]: Stopped initrd-switch-root.service. Jul 2 07:56:36.839796 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 07:56:36.839819 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 07:56:36.839840 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 07:56:36.842031 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 2 07:56:36.842065 systemd[1]: Created slice system-getty.slice. Jul 2 07:56:36.842085 systemd[1]: Created slice system-modprobe.slice. Jul 2 07:56:36.842110 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 07:56:36.842132 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 07:56:36.842232 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 07:56:36.842259 systemd[1]: Created slice user.slice. Jul 2 07:56:36.842278 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:56:36.842297 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 07:56:36.842316 systemd[1]: Set up automount boot.automount. Jul 2 07:56:36.842335 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 07:56:36.842353 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 07:56:36.842372 systemd[1]: Stopped target initrd-fs.target. Jul 2 07:56:36.842391 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 07:56:36.842410 systemd[1]: Reached target integritysetup.target. Jul 2 07:56:36.842432 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:56:36.842451 systemd[1]: Reached target remote-fs.target. Jul 2 07:56:36.842471 systemd[1]: Reached target slices.target. Jul 2 07:56:36.842489 systemd[1]: Reached target swap.target. Jul 2 07:56:36.842507 systemd[1]: Reached target torcx.target. Jul 2 07:56:36.842525 systemd[1]: Reached target veritysetup.target. Jul 2 07:56:36.842546 systemd[1]: Listening on systemd-coredump.socket. Jul 2 07:56:36.842565 systemd[1]: Listening on systemd-initctl.socket. Jul 2 07:56:36.842584 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:56:36.842606 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:56:36.842628 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:56:36.842648 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 07:56:36.842669 systemd[1]: Mounting dev-hugepages.mount... Jul 2 07:56:36.842691 systemd[1]: Mounting dev-mqueue.mount... Jul 2 07:56:36.842710 systemd[1]: Mounting media.mount... Jul 2 07:56:36.842729 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:36.842747 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 07:56:36.842767 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 07:56:36.842787 systemd[1]: Mounting tmp.mount... Jul 2 07:56:36.842805 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 07:56:36.842821 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:56:36.842839 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:56:36.842884 systemd[1]: Starting modprobe@configfs.service... Jul 2 07:56:36.842908 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:56:36.842934 systemd[1]: Starting modprobe@drm.service... Jul 2 07:56:36.842950 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:56:36.842970 systemd[1]: Starting modprobe@fuse.service... Jul 2 07:56:36.842994 systemd[1]: Starting modprobe@loop.service... Jul 2 07:56:36.843016 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 07:56:36.843035 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 07:56:36.843054 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 07:56:36.843075 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 07:56:36.843096 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 07:56:36.843126 systemd[1]: Stopped systemd-journald.service. Jul 2 07:56:36.843151 systemd[1]: Starting systemd-journald.service... Jul 2 07:56:36.843171 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:56:36.843192 systemd[1]: Starting systemd-network-generator.service... Jul 2 07:56:36.843210 systemd[1]: Starting systemd-remount-fs.service... Jul 2 07:56:36.846982 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:56:36.847009 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 07:56:36.847027 systemd[1]: Stopped verity-setup.service. Jul 2 07:56:36.847054 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:36.847076 systemd[1]: Mounted dev-hugepages.mount. Jul 2 07:56:36.847096 systemd[1]: Mounted dev-mqueue.mount. Jul 2 07:56:36.847116 systemd[1]: Mounted media.mount. Jul 2 07:56:36.849928 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 07:56:36.849986 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 07:56:36.850006 systemd[1]: Mounted tmp.mount. Jul 2 07:56:36.850026 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:56:36.850048 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 07:56:36.850077 systemd[1]: Finished modprobe@configfs.service. Jul 2 07:56:36.850099 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:56:36.850122 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:56:36.850346 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:56:36.850405 systemd[1]: Finished modprobe@drm.service. Jul 2 07:56:36.850434 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:56:36.850493 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:56:36.850523 systemd[1]: Finished systemd-network-generator.service. Jul 2 07:56:36.850584 systemd[1]: Finished systemd-remount-fs.service. Jul 2 07:56:36.850775 systemd[1]: Reached target network-pre.target. Jul 2 07:56:36.850835 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 07:56:36.855495 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 07:56:36.855657 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 07:56:36.855681 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:56:36.855707 systemd[1]: Starting systemd-random-seed.service... Jul 2 07:56:36.855727 kernel: fuse: init (API version 7.34) Jul 2 07:56:36.856050 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:56:36.856079 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 07:56:36.856099 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 07:56:36.856122 systemd[1]: Finished modprobe@fuse.service. Jul 2 07:56:36.856140 systemd[1]: Finished systemd-random-seed.service. Jul 2 07:56:36.856169 systemd-journald[1411]: Journal started Jul 2 07:56:36.856251 systemd-journald[1411]: Runtime Journal (/run/log/journal/ec21433120b16426e8f88f51f0defc0a) is 4.8M, max 38.7M, 33.9M free. Jul 2 07:56:32.616000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 07:56:32.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:56:36.860599 systemd[1]: Started systemd-journald.service. Jul 2 07:56:32.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:56:32.767000 audit: BPF prog-id=10 op=LOAD Jul 2 07:56:32.767000 audit: BPF prog-id=10 op=UNLOAD Jul 2 07:56:32.767000 audit: BPF prog-id=11 op=LOAD Jul 2 07:56:32.767000 audit: BPF prog-id=11 op=UNLOAD Jul 2 07:56:32.985000 audit[1334]: AVC avc: denied { associate } for pid=1334 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 07:56:32.985000 audit[1334]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178e2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=1317 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:32.985000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:56:32.986000 audit[1334]: AVC avc: denied { associate } for pid=1334 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 07:56:32.986000 audit[1334]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179b9 a2=1ed a3=0 items=2 ppid=1317 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:32.986000 audit: CWD cwd="/" Jul 2 07:56:32.986000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:32.986000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:32.986000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:56:36.560000 audit: BPF prog-id=12 op=LOAD Jul 2 07:56:36.560000 audit: BPF prog-id=3 op=UNLOAD Jul 2 07:56:36.561000 audit: BPF prog-id=13 op=LOAD Jul 2 07:56:36.562000 audit: BPF prog-id=14 op=LOAD Jul 2 07:56:36.562000 audit: BPF prog-id=4 op=UNLOAD Jul 2 07:56:36.562000 audit: BPF prog-id=5 op=UNLOAD Jul 2 07:56:36.565000 audit: BPF prog-id=15 op=LOAD Jul 2 07:56:36.565000 audit: BPF prog-id=12 op=UNLOAD Jul 2 07:56:36.566000 audit: BPF prog-id=16 op=LOAD Jul 2 07:56:36.567000 audit: BPF prog-id=17 op=LOAD Jul 2 07:56:36.567000 audit: BPF prog-id=13 op=UNLOAD Jul 2 07:56:36.567000 audit: BPF prog-id=14 op=UNLOAD Jul 2 07:56:36.568000 audit: BPF prog-id=18 op=LOAD Jul 2 07:56:36.568000 audit: BPF prog-id=15 op=UNLOAD Jul 2 07:56:36.571000 audit: BPF prog-id=19 op=LOAD Jul 2 07:56:36.572000 audit: BPF prog-id=20 op=LOAD Jul 2 07:56:36.572000 audit: BPF prog-id=16 op=UNLOAD Jul 2 07:56:36.572000 audit: BPF prog-id=17 op=UNLOAD Jul 2 07:56:36.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.579000 audit: BPF prog-id=18 op=UNLOAD Jul 2 07:56:36.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.713000 audit: BPF prog-id=21 op=LOAD Jul 2 07:56:36.713000 audit: BPF prog-id=22 op=LOAD Jul 2 07:56:36.713000 audit: BPF prog-id=23 op=LOAD Jul 2 07:56:36.713000 audit: BPF prog-id=19 op=UNLOAD Jul 2 07:56:36.713000 audit: BPF prog-id=20 op=UNLOAD Jul 2 07:56:36.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.829000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 07:56:36.829000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd6de42650 a2=4000 a3=7ffd6de426ec items=0 ppid=1 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:36.829000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 07:56:36.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.559611 systemd[1]: Queued start job for default target multi-user.target. Jul 2 07:56:32.970779 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:56:36.573725 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 07:56:32.971473 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:56:36.860237 systemd[1]: Reached target first-boot-complete.target. Jul 2 07:56:36.895946 kernel: loop: module loaded Jul 2 07:56:32.971492 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:56:36.864283 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 07:56:32.971524 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 07:56:36.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.867636 systemd[1]: Starting systemd-journal-flush.service... Jul 2 07:56:32.971534 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 07:56:36.870607 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:56:32.971565 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 07:56:36.873321 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 07:56:32.971577 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 07:56:36.896035 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:56:32.971776 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 07:56:36.896217 systemd[1]: Finished modprobe@loop.service. Jul 2 07:56:32.971812 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:56:36.897921 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:56:32.971825 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:56:32.973451 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 07:56:32.973489 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 07:56:32.973508 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 07:56:32.973522 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 07:56:36.912130 systemd-journald[1411]: Time spent on flushing to /var/log/journal/ec21433120b16426e8f88f51f0defc0a is 99.637ms for 1189 entries. Jul 2 07:56:36.912130 systemd-journald[1411]: System Journal (/var/log/journal/ec21433120b16426e8f88f51f0defc0a) is 8.0M, max 195.6M, 187.6M free. Jul 2 07:56:37.039882 systemd-journald[1411]: Received client request to flush runtime journal. Jul 2 07:56:36.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:37.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:37.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:32.973541 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 07:56:37.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:36.915495 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:56:32.973554 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 07:56:37.012659 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 07:56:36.093049 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:36Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:56:37.015274 systemd[1]: Starting systemd-sysusers.service... Jul 2 07:56:36.093321 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:36Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:56:37.028654 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:56:36.093440 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:36Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:56:37.031670 systemd[1]: Starting systemd-udev-settle.service... Jul 2 07:56:36.093636 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:36Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:56:37.041233 systemd[1]: Finished systemd-journal-flush.service. Jul 2 07:56:36.093761 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:36Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 07:56:36.093825 /usr/lib/systemd/system-generators/torcx-generator[1334]: time="2024-07-02T07:56:36Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 07:56:37.051366 udevadm[1451]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 2 07:56:37.103766 systemd[1]: Finished systemd-sysusers.service. Jul 2 07:56:37.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:37.703213 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 07:56:37.704000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:37.704000 audit: BPF prog-id=24 op=LOAD Jul 2 07:56:37.704000 audit: BPF prog-id=25 op=LOAD Jul 2 07:56:37.704000 audit: BPF prog-id=7 op=UNLOAD Jul 2 07:56:37.704000 audit: BPF prog-id=8 op=UNLOAD Jul 2 07:56:37.707093 systemd[1]: Starting systemd-udevd.service... Jul 2 07:56:37.729950 systemd-udevd[1452]: Using default interface naming scheme 'v252'. Jul 2 07:56:37.778503 systemd[1]: Started systemd-udevd.service. Jul 2 07:56:37.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:37.782000 audit: BPF prog-id=26 op=LOAD Jul 2 07:56:37.783977 systemd[1]: Starting systemd-networkd.service... Jul 2 07:56:37.794000 audit: BPF prog-id=27 op=LOAD Jul 2 07:56:37.794000 audit: BPF prog-id=28 op=LOAD Jul 2 07:56:37.794000 audit: BPF prog-id=29 op=LOAD Jul 2 07:56:37.798109 systemd[1]: Starting systemd-userdbd.service... Jul 2 07:56:37.886227 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 07:56:37.916675 systemd[1]: Started systemd-userdbd.service. Jul 2 07:56:37.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:37.960149 (udev-worker)[1454]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:56:38.015877 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Jul 2 07:56:38.055000 audit[1457]: AVC avc: denied { confidentiality } for pid=1457 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 07:56:38.055000 audit[1457]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55c4b2bb2c80 a1=3207c a2=7f9e1574abc5 a3=5 items=108 ppid=1452 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:38.055000 audit: CWD cwd="/" Jul 2 07:56:38.064870 systemd-networkd[1458]: lo: Link UP Jul 2 07:56:38.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.064876 systemd-networkd[1458]: lo: Gained carrier Jul 2 07:56:38.065475 systemd-networkd[1458]: Enumeration completed Jul 2 07:56:38.065603 systemd[1]: Started systemd-networkd.service. Jul 2 07:56:38.065616 systemd-networkd[1458]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:56:38.068296 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 07:56:38.055000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=1 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=2 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=3 name=(null) inode=13786 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=4 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=5 name=(null) inode=13787 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=6 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=7 name=(null) inode=13788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=8 name=(null) inode=13788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=9 name=(null) inode=13789 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=10 name=(null) inode=13788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=11 name=(null) inode=13790 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=12 name=(null) inode=13788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=13 name=(null) inode=13791 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=14 name=(null) inode=13788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=15 name=(null) inode=13792 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=16 name=(null) inode=13788 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=17 name=(null) inode=13793 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.074940 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:56:38.074400 systemd-networkd[1458]: eth0: Link UP Jul 2 07:56:38.074580 systemd-networkd[1458]: eth0: Gained carrier Jul 2 07:56:38.055000 audit: PATH item=18 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=19 name=(null) inode=13794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=20 name=(null) inode=13794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=21 name=(null) inode=13795 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=22 name=(null) inode=13794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=23 name=(null) inode=13796 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=24 name=(null) inode=13794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=25 name=(null) inode=13797 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=26 name=(null) inode=13794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=27 name=(null) inode=13798 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=28 name=(null) inode=13794 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=29 name=(null) inode=13799 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=30 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=31 name=(null) inode=13800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=32 name=(null) inode=13800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=33 name=(null) inode=13801 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=34 name=(null) inode=13800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=35 name=(null) inode=13802 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=36 name=(null) inode=13800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=37 name=(null) inode=13803 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=38 name=(null) inode=13800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=39 name=(null) inode=13804 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=40 name=(null) inode=13800 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=41 name=(null) inode=13805 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=42 name=(null) inode=13785 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=43 name=(null) inode=13806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=44 name=(null) inode=13806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=45 name=(null) inode=13807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=46 name=(null) inode=13806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=47 name=(null) inode=13808 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=48 name=(null) inode=13806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=49 name=(null) inode=13809 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=50 name=(null) inode=13806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=51 name=(null) inode=13810 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=52 name=(null) inode=13806 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=53 name=(null) inode=13811 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=55 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=56 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=57 name=(null) inode=13813 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=58 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=59 name=(null) inode=13814 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=60 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=61 name=(null) inode=13815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=62 name=(null) inode=13815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=63 name=(null) inode=13816 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=64 name=(null) inode=13815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=65 name=(null) inode=13817 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=66 name=(null) inode=13815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=67 name=(null) inode=13818 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=68 name=(null) inode=13815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=69 name=(null) inode=13819 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=70 name=(null) inode=13815 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=71 name=(null) inode=13820 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=72 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=73 name=(null) inode=13821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=74 name=(null) inode=13821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=75 name=(null) inode=13822 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=76 name=(null) inode=13821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=77 name=(null) inode=13823 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=78 name=(null) inode=13821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=79 name=(null) inode=13824 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=80 name=(null) inode=13821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=81 name=(null) inode=13825 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=82 name=(null) inode=13821 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=83 name=(null) inode=13826 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=84 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=85 name=(null) inode=13827 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=86 name=(null) inode=13827 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=87 name=(null) inode=13828 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=88 name=(null) inode=13827 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=89 name=(null) inode=13829 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=90 name=(null) inode=13827 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=91 name=(null) inode=13830 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=92 name=(null) inode=13827 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=93 name=(null) inode=13831 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=94 name=(null) inode=13827 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=95 name=(null) inode=13832 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=96 name=(null) inode=13812 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=97 name=(null) inode=13833 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=98 name=(null) inode=13833 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=99 name=(null) inode=13834 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=100 name=(null) inode=13833 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=101 name=(null) inode=13835 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=102 name=(null) inode=13833 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=103 name=(null) inode=13836 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=104 name=(null) inode=13833 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=105 name=(null) inode=13837 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=106 name=(null) inode=13833 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.055000 audit: PATH item=107 name=(null) inode=13838 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:56:38.086105 systemd-networkd[1458]: eth0: DHCPv4 address 172.31.21.43/20, gateway 172.31.16.1 acquired from 172.31.16.1 Jul 2 07:56:38.087911 kernel: ACPI: button: Power Button [PWRF] Jul 2 07:56:38.055000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 07:56:38.090505 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 Jul 2 07:56:38.090557 kernel: ACPI: button: Sleep Button [SLPF] Jul 2 07:56:38.108927 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Jul 2 07:56:38.116884 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input5 Jul 2 07:56:38.131878 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 07:56:38.164878 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1466) Jul 2 07:56:38.260095 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:56:38.326305 systemd[1]: Finished systemd-udev-settle.service. Jul 2 07:56:38.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.328666 systemd[1]: Starting lvm2-activation-early.service... Jul 2 07:56:38.359184 lvm[1566]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:56:38.407530 systemd[1]: Finished lvm2-activation-early.service. Jul 2 07:56:38.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.408718 systemd[1]: Reached target cryptsetup.target. Jul 2 07:56:38.410980 systemd[1]: Starting lvm2-activation.service... Jul 2 07:56:38.417343 lvm[1567]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:56:38.445439 systemd[1]: Finished lvm2-activation.service. Jul 2 07:56:38.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.446684 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:56:38.447650 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 07:56:38.447696 systemd[1]: Reached target local-fs.target. Jul 2 07:56:38.448748 systemd[1]: Reached target machines.target. Jul 2 07:56:38.451651 systemd[1]: Starting ldconfig.service... Jul 2 07:56:38.453179 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:56:38.453268 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:38.455963 systemd[1]: Starting systemd-boot-update.service... Jul 2 07:56:38.459607 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 07:56:38.463540 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 07:56:38.467632 systemd[1]: Starting systemd-sysext.service... Jul 2 07:56:38.503684 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1569 (bootctl) Jul 2 07:56:38.510903 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 07:56:38.520092 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 07:56:38.530937 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 07:56:38.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.536443 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 07:56:38.536684 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 07:56:38.558946 kernel: loop0: detected capacity change from 0 to 209816 Jul 2 07:56:38.687087 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 07:56:38.698710 systemd-fsck[1580]: fsck.fat 4.2 (2021-01-31) Jul 2 07:56:38.698710 systemd-fsck[1580]: /dev/nvme0n1p1: 789 files, 119238/258078 clusters Jul 2 07:56:38.701017 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 07:56:38.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.704119 systemd[1]: Mounting boot.mount... Jul 2 07:56:38.718974 kernel: loop1: detected capacity change from 0 to 209816 Jul 2 07:56:38.726779 systemd[1]: Mounted boot.mount. Jul 2 07:56:38.768712 (sd-sysext)[1585]: Using extensions 'kubernetes'. Jul 2 07:56:38.769829 (sd-sysext)[1585]: Merged extensions into '/usr'. Jul 2 07:56:38.823679 systemd[1]: Finished systemd-boot-update.service. Jul 2 07:56:38.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.826337 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:38.830490 systemd[1]: Mounting usr-share-oem.mount... Jul 2 07:56:38.837706 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:56:38.842028 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:56:38.847550 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:56:38.857779 systemd[1]: Starting modprobe@loop.service... Jul 2 07:56:38.859133 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:56:38.859428 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:38.859792 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:38.869389 systemd[1]: Mounted usr-share-oem.mount. Jul 2 07:56:38.877276 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:56:38.877705 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:56:38.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.880728 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:56:38.880928 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:56:38.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.884144 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:56:38.887129 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:56:38.887912 systemd[1]: Finished modprobe@loop.service. Jul 2 07:56:38.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.891712 systemd[1]: Finished systemd-sysext.service. Jul 2 07:56:38.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:38.897867 systemd[1]: Starting ensure-sysext.service... Jul 2 07:56:38.899702 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:56:38.901824 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 07:56:38.923038 systemd[1]: Reloading. Jul 2 07:56:39.024530 systemd-tmpfiles[1602]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 07:56:39.039475 systemd-tmpfiles[1602]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 07:56:39.094520 systemd-tmpfiles[1602]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 07:56:39.130552 /usr/lib/systemd/system-generators/torcx-generator[1622]: time="2024-07-02T07:56:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:56:39.130588 /usr/lib/systemd/system-generators/torcx-generator[1622]: time="2024-07-02T07:56:39Z" level=info msg="torcx already run" Jul 2 07:56:39.146047 systemd-networkd[1458]: eth0: Gained IPv6LL Jul 2 07:56:39.363799 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:56:39.364104 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:56:39.407779 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:56:39.476402 ldconfig[1568]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 07:56:39.502945 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 07:56:39.505000 audit: BPF prog-id=30 op=LOAD Jul 2 07:56:39.505000 audit: BPF prog-id=31 op=LOAD Jul 2 07:56:39.505000 audit: BPF prog-id=24 op=UNLOAD Jul 2 07:56:39.505000 audit: BPF prog-id=25 op=UNLOAD Jul 2 07:56:39.508000 audit: BPF prog-id=32 op=LOAD Jul 2 07:56:39.508000 audit: BPF prog-id=21 op=UNLOAD Jul 2 07:56:39.508000 audit: BPF prog-id=33 op=LOAD Jul 2 07:56:39.508000 audit: BPF prog-id=34 op=LOAD Jul 2 07:56:39.508000 audit: BPF prog-id=22 op=UNLOAD Jul 2 07:56:39.508000 audit: BPF prog-id=23 op=UNLOAD Jul 2 07:56:39.510000 audit: BPF prog-id=35 op=LOAD Jul 2 07:56:39.510000 audit: BPF prog-id=26 op=UNLOAD Jul 2 07:56:39.513000 audit: BPF prog-id=36 op=LOAD Jul 2 07:56:39.514000 audit: BPF prog-id=27 op=UNLOAD Jul 2 07:56:39.514000 audit: BPF prog-id=37 op=LOAD Jul 2 07:56:39.514000 audit: BPF prog-id=38 op=LOAD Jul 2 07:56:39.514000 audit: BPF prog-id=28 op=UNLOAD Jul 2 07:56:39.514000 audit: BPF prog-id=29 op=UNLOAD Jul 2 07:56:39.518757 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 07:56:39.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.520679 systemd[1]: Finished ldconfig.service. Jul 2 07:56:39.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.525879 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 07:56:39.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.532309 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 07:56:39.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.548567 systemd[1]: Starting audit-rules.service... Jul 2 07:56:39.551547 systemd[1]: Starting clean-ca-certificates.service... Jul 2 07:56:39.556169 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 07:56:39.559000 audit: BPF prog-id=39 op=LOAD Jul 2 07:56:39.566589 systemd[1]: Starting systemd-resolved.service... Jul 2 07:56:39.568000 audit: BPF prog-id=40 op=LOAD Jul 2 07:56:39.571682 systemd[1]: Starting systemd-timesyncd.service... Jul 2 07:56:39.575081 systemd[1]: Starting systemd-update-utmp.service... Jul 2 07:56:39.579535 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:39.579960 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.586328 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:56:39.589154 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:56:39.593259 systemd[1]: Starting modprobe@loop.service... Jul 2 07:56:39.598633 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.598935 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:39.599153 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:39.605037 systemd[1]: Finished clean-ca-certificates.service. Jul 2 07:56:39.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.609650 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:56:39.609877 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:56:39.619217 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:56:39.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.619394 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:56:39.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.621260 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:56:39.621394 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:56:39.627530 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:56:39.627725 systemd[1]: Finished modprobe@loop.service. Jul 2 07:56:39.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.629246 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.633385 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:39.633777 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.635816 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:56:39.638915 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:56:39.641971 systemd[1]: Starting modprobe@loop.service... Jul 2 07:56:39.643118 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.643336 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:39.647004 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:56:39.647162 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:39.664000 audit[1681]: SYSTEM_BOOT pid=1681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.671178 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:56:39.671609 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:56:39.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.675653 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:39.676410 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.680823 systemd[1]: Starting modprobe@drm.service... Jul 2 07:56:39.682142 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.682423 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:39.682922 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:56:39.683163 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:56:39.695601 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:56:39.695816 systemd[1]: Finished modprobe@loop.service. Jul 2 07:56:39.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.699423 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.707565 systemd[1]: Finished systemd-update-utmp.service. Jul 2 07:56:39.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.709784 systemd[1]: Finished ensure-sysext.service. Jul 2 07:56:39.711150 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:56:39.711312 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:56:39.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.712484 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:56:39.714505 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:56:39.714675 systemd[1]: Finished modprobe@drm.service. Jul 2 07:56:39.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.744421 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 07:56:39.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.747543 systemd[1]: Starting systemd-update-done.service... Jul 2 07:56:39.769702 systemd[1]: Finished systemd-update-done.service. Jul 2 07:56:39.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:39.799000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 07:56:39.799000 audit[1703]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffde2ce0c0 a2=420 a3=0 items=0 ppid=1675 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:39.799000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 07:56:39.801182 systemd[1]: Finished audit-rules.service. Jul 2 07:56:39.805084 augenrules[1703]: No rules Jul 2 07:56:39.816742 systemd[1]: Started systemd-timesyncd.service. Jul 2 07:56:39.824534 systemd[1]: Reached target time-set.target. Jul 2 07:56:39.825775 systemd-resolved[1679]: Positive Trust Anchors: Jul 2 07:56:39.827192 systemd-resolved[1679]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:56:39.828147 systemd-resolved[1679]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:56:39.863528 systemd-resolved[1679]: Defaulting to hostname 'linux'. Jul 2 07:56:39.865956 systemd[1]: Started systemd-resolved.service. Jul 2 07:56:39.867252 systemd[1]: Reached target network.target. Jul 2 07:56:39.868207 systemd[1]: Reached target network-online.target. Jul 2 07:56:39.869150 systemd[1]: Reached target nss-lookup.target. Jul 2 07:56:39.870264 systemd[1]: Reached target sysinit.target. Jul 2 07:56:39.871585 systemd[1]: Started motdgen.path. Jul 2 07:56:39.872560 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 07:56:39.875292 systemd[1]: Started logrotate.timer. Jul 2 07:56:39.877081 systemd[1]: Started mdadm.timer. Jul 2 07:56:39.878091 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 07:56:39.878997 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 07:56:39.879046 systemd[1]: Reached target paths.target. Jul 2 07:56:39.880293 systemd[1]: Reached target timers.target. Jul 2 07:56:39.881815 systemd[1]: Listening on dbus.socket. Jul 2 07:56:39.890445 systemd[1]: Starting docker.socket... Jul 2 07:56:39.896530 systemd[1]: Listening on sshd.socket. Jul 2 07:56:39.898159 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:39.899342 systemd[1]: Listening on docker.socket. Jul 2 07:56:39.900608 systemd[1]: Reached target sockets.target. Jul 2 07:56:39.901968 systemd[1]: Reached target basic.target. Jul 2 07:56:39.903425 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.903471 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:56:39.907369 systemd[1]: Started amazon-ssm-agent.service. Jul 2 07:56:39.910559 systemd[1]: Starting containerd.service... Jul 2 07:56:39.917022 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 2 07:56:39.921331 systemd[1]: Starting dbus.service... Jul 2 07:56:39.933302 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 07:56:39.939737 systemd[1]: Starting extend-filesystems.service... Jul 2 07:56:40.066184 jq[1715]: false Jul 2 07:56:39.940905 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 07:56:39.947263 systemd[1]: Starting kubelet.service... Jul 2 07:56:39.957587 systemd[1]: Starting motdgen.service... Jul 2 07:56:39.962413 systemd[1]: Started nvidia.service. Jul 2 07:56:39.971296 systemd[1]: Starting prepare-helm.service... Jul 2 07:56:40.012394 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 07:56:40.024594 systemd[1]: Starting sshd-keygen.service... Jul 2 07:56:40.030168 systemd[1]: Starting systemd-logind.service... Jul 2 07:56:40.031307 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:56:40.031387 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 07:56:40.240078 jq[1725]: true Jul 2 07:56:40.032423 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 07:56:40.034250 systemd[1]: Starting update-engine.service... Jul 2 07:56:40.037697 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 07:56:40.251119 tar[1728]: linux-amd64/helm Jul 2 07:56:40.055555 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 07:56:40.055964 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 07:56:40.252276 jq[1730]: true Jul 2 07:56:40.204640 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 07:56:40.255804 dbus-daemon[1714]: [system] SELinux support is enabled Jul 2 07:56:40.204927 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 07:56:40.256044 systemd[1]: Started dbus.service. Jul 2 07:56:40.260838 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 07:56:40.260892 systemd[1]: Reached target system-config.target. Jul 2 07:56:40.262073 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 07:56:40.262102 systemd[1]: Reached target user-config.target. Jul 2 07:56:40.267286 dbus-daemon[1714]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1458 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Jul 2 07:56:40.273238 systemd[1]: Starting systemd-hostnamed.service... Jul 2 07:56:40.292504 extend-filesystems[1716]: Found loop1 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1p1 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1p2 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1p3 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found usr Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1p4 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1p6 Jul 2 07:56:40.292504 extend-filesystems[1716]: Found nvme0n1p7 Jul 2 07:56:40.338603 extend-filesystems[1716]: Found nvme0n1p9 Jul 2 07:56:40.338603 extend-filesystems[1716]: Checking size of /dev/nvme0n1p9 Jul 2 07:56:40.359174 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 07:56:40.359397 systemd[1]: Finished motdgen.service. Jul 2 07:56:40.403314 extend-filesystems[1716]: Resized partition /dev/nvme0n1p9 Jul 2 07:56:40.453040 extend-filesystems[1780]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 07:56:40.470654 bash[1774]: Updated "/home/core/.ssh/authorized_keys" Jul 2 07:56:40.472667 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 07:56:40.480763 amazon-ssm-agent[1711]: 2024/07/02 07:56:40 Failed to load instance info from vault. RegistrationKey does not exist. Jul 2 07:56:40.484068 update_engine[1724]: I0702 07:56:40.482532 1724 main.cc:92] Flatcar Update Engine starting Jul 2 07:56:40.489924 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Jul 2 07:56:40.496149 amazon-ssm-agent[1711]: Initializing new seelog logger Jul 2 07:56:40.502013 amazon-ssm-agent[1711]: New Seelog Logger Creation Complete Jul 2 07:56:40.503719 systemd[1]: Started update-engine.service. Jul 2 07:56:40.507379 systemd[1]: Started locksmithd.service. Jul 2 07:56:40.510988 update_engine[1724]: I0702 07:56:40.510496 1724 update_check_scheduler.cc:74] Next update check in 11m17s Jul 2 07:56:40.511072 amazon-ssm-agent[1711]: 2024/07/02 07:56:40 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Jul 2 07:56:40.511072 amazon-ssm-agent[1711]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Jul 2 07:56:40.511072 amazon-ssm-agent[1711]: 2024/07/02 07:56:40 processing appconfig overrides Jul 2 07:56:40.554622 env[1729]: time="2024-07-02T07:56:40.554557432Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 07:56:40.566881 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Jul 2 07:56:40.610225 extend-filesystems[1780]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Jul 2 07:56:40.610225 extend-filesystems[1780]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 2 07:56:40.610225 extend-filesystems[1780]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Jul 2 07:56:40.618019 extend-filesystems[1716]: Resized filesystem in /dev/nvme0n1p9 Jul 2 07:56:40.614750 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 07:56:40.614995 systemd[1]: Finished extend-filesystems.service. Jul 2 07:56:40.679988 systemd-logind[1723]: Watching system buttons on /dev/input/event1 (Power Button) Jul 2 07:56:40.693736 systemd-logind[1723]: Watching system buttons on /dev/input/event2 (Sleep Button) Jul 2 07:56:40.694159 systemd-logind[1723]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 2 07:56:40.701761 systemd-logind[1723]: New seat seat0. Jul 2 07:56:40.760263 env[1729]: time="2024-07-02T07:56:40.760165934Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 07:56:40.760437 env[1729]: time="2024-07-02T07:56:40.760418361Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:56:40.776034 env[1729]: time="2024-07-02T07:56:40.775976755Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:56:40.776034 env[1729]: time="2024-07-02T07:56:40.776031492Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:56:40.776462 env[1729]: time="2024-07-02T07:56:40.776421081Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:56:40.776462 env[1729]: time="2024-07-02T07:56:40.776460902Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 07:56:40.776609 env[1729]: time="2024-07-02T07:56:40.776482192Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 07:56:40.776609 env[1729]: time="2024-07-02T07:56:40.776496359Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 07:56:40.776691 env[1729]: time="2024-07-02T07:56:40.776604176Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:56:40.794466 env[1729]: time="2024-07-02T07:56:40.793661632Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:56:40.794466 env[1729]: time="2024-07-02T07:56:40.794071717Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:56:40.794466 env[1729]: time="2024-07-02T07:56:40.794103851Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 07:56:40.794466 env[1729]: time="2024-07-02T07:56:40.794237878Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 07:56:40.794466 env[1729]: time="2024-07-02T07:56:40.794256890Z" level=info msg="metadata content store policy set" policy=shared Jul 2 07:56:40.796562 systemd[1]: nvidia.service: Deactivated successfully. Jul 2 07:56:40.800479 systemd[1]: Started systemd-logind.service. Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803064529Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803124657Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803148330Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803218357Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803326599Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803350311Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803377550Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803409475Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803432219Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803451720Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803477746Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803497864Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803657589Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 07:56:40.803878 env[1729]: time="2024-07-02T07:56:40.803757910Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 07:56:40.805311 env[1729]: time="2024-07-02T07:56:40.805161026Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 07:56:40.805311 env[1729]: time="2024-07-02T07:56:40.805215887Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805311 env[1729]: time="2024-07-02T07:56:40.805240407Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805598573Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805720569Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805741253Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805758548Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805777560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805796224Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805813976Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.805875 env[1729]: time="2024-07-02T07:56:40.805831992Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806284318Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806465164Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806488000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806508379Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806526841Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806650451Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806673929Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806699424Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 07:56:40.806969 env[1729]: time="2024-07-02T07:56:40.806745050Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 07:56:40.807722 env[1729]: time="2024-07-02T07:56:40.807646066Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 07:56:40.810166 env[1729]: time="2024-07-02T07:56:40.807913176Z" level=info msg="Connect containerd service" Jul 2 07:56:40.810166 env[1729]: time="2024-07-02T07:56:40.807970983Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 07:56:40.810751 env[1729]: time="2024-07-02T07:56:40.810718114Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:56:40.811257 env[1729]: time="2024-07-02T07:56:40.811232657Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 07:56:40.811410 env[1729]: time="2024-07-02T07:56:40.811394413Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 07:56:40.811608 systemd[1]: Started containerd.service. Jul 2 07:56:40.811866 env[1729]: time="2024-07-02T07:56:40.811834684Z" level=info msg="containerd successfully booted in 0.263001s" Jul 2 07:56:40.821100 env[1729]: time="2024-07-02T07:56:40.821023880Z" level=info msg="Start subscribing containerd event" Jul 2 07:56:40.821986 env[1729]: time="2024-07-02T07:56:40.821940806Z" level=info msg="Start recovering state" Jul 2 07:56:40.822213 env[1729]: time="2024-07-02T07:56:40.822195914Z" level=info msg="Start event monitor" Jul 2 07:56:40.822586 env[1729]: time="2024-07-02T07:56:40.822563305Z" level=info msg="Start snapshots syncer" Jul 2 07:56:40.822709 env[1729]: time="2024-07-02T07:56:40.822692949Z" level=info msg="Start cni network conf syncer for default" Jul 2 07:56:40.822799 env[1729]: time="2024-07-02T07:56:40.822787088Z" level=info msg="Start streaming server" Jul 2 07:56:40.877285 dbus-daemon[1714]: [system] Successfully activated service 'org.freedesktop.hostname1' Jul 2 07:56:40.878507 systemd[1]: Started systemd-hostnamed.service. Jul 2 07:56:40.883969 dbus-daemon[1714]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1755 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Jul 2 07:56:40.888020 systemd[1]: Starting polkit.service... Jul 2 07:56:40.955235 polkitd[1810]: Started polkitd version 121 Jul 2 07:56:40.994520 polkitd[1810]: Loading rules from directory /etc/polkit-1/rules.d Jul 2 07:56:40.994761 polkitd[1810]: Loading rules from directory /usr/share/polkit-1/rules.d Jul 2 07:56:40.998680 polkitd[1810]: Finished loading, compiling and executing 2 rules Jul 2 07:56:40.999493 dbus-daemon[1714]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Jul 2 07:56:40.999710 systemd[1]: Started polkit.service. Jul 2 07:56:41.000171 polkitd[1810]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jul 2 07:56:41.048609 systemd-hostnamed[1755]: Hostname set to (transient) Jul 2 07:56:41.048739 systemd-resolved[1679]: System hostname changed to 'ip-172-31-21-43'. Jul 2 07:56:41.259641 coreos-metadata[1713]: Jul 02 07:56:41.258 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Jul 2 07:56:41.267830 coreos-metadata[1713]: Jul 02 07:56:41.267 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Jul 2 07:56:41.268771 coreos-metadata[1713]: Jul 02 07:56:41.268 INFO Fetch successful Jul 2 07:56:41.269053 coreos-metadata[1713]: Jul 02 07:56:41.268 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 2 07:56:41.274326 coreos-metadata[1713]: Jul 02 07:56:41.274 INFO Fetch successful Jul 2 07:56:41.277319 unknown[1713]: wrote ssh authorized keys file for user: core Jul 2 07:56:41.313211 update-ssh-keys[1877]: Updated "/home/core/.ssh/authorized_keys" Jul 2 07:56:41.314258 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 2 07:56:41.349257 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Create new startup processor Jul 2 07:56:41.364795 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [LongRunningPluginsManager] registered plugins: {} Jul 2 07:56:41.365093 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing bookkeeping folders Jul 2 07:56:41.365200 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO removing the completed state files Jul 2 07:56:41.365268 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing bookkeeping folders for long running plugins Jul 2 07:56:41.365358 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Jul 2 07:56:41.365418 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing healthcheck folders for long running plugins Jul 2 07:56:41.365480 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing locations for inventory plugin Jul 2 07:56:41.365570 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing default location for custom inventory Jul 2 07:56:41.365633 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing default location for file inventory Jul 2 07:56:41.365692 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Initializing default location for role inventory Jul 2 07:56:41.365763 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Init the cloudwatchlogs publisher Jul 2 07:56:41.365823 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:softwareInventory Jul 2 07:56:41.365924 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:updateSsmAgent Jul 2 07:56:41.365988 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:configurePackage Jul 2 07:56:41.366047 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:downloadContent Jul 2 07:56:41.366118 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:runPowerShellScript Jul 2 07:56:41.366184 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:configureDocker Jul 2 07:56:41.366260 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:runDockerAction Jul 2 07:56:41.366330 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:refreshAssociation Jul 2 07:56:41.366402 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform independent plugin aws:runDocument Jul 2 07:56:41.366473 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Successfully loaded platform dependent plugin aws:runShellScript Jul 2 07:56:41.366543 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Jul 2 07:56:41.366620 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO OS: linux, Arch: amd64 Jul 2 07:56:41.367099 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] Starting document processing engine... Jul 2 07:56:41.371685 amazon-ssm-agent[1711]: datastore file /var/lib/amazon/ssm/i-0222d070cf5947928/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Jul 2 07:56:41.465801 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [EngineProcessor] Starting Jul 2 07:56:41.562077 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Jul 2 07:56:41.656984 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] Starting message polling Jul 2 07:56:41.751665 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] Starting send replies to MDS Jul 2 07:56:41.837481 tar[1728]: linux-amd64/LICENSE Jul 2 07:56:41.838002 tar[1728]: linux-amd64/README.md Jul 2 07:56:41.845501 systemd[1]: Finished prepare-helm.service. Jul 2 07:56:41.847603 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [instanceID=i-0222d070cf5947928] Starting association polling Jul 2 07:56:41.942419 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Jul 2 07:56:42.037685 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [Association] Launching response handler Jul 2 07:56:42.127564 locksmithd[1783]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 07:56:42.133970 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Jul 2 07:56:42.194928 systemd[1]: Started kubelet.service. Jul 2 07:56:42.229934 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Jul 2 07:56:42.326297 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Jul 2 07:56:42.422412 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [HealthCheck] HealthCheck reporting agent health. Jul 2 07:56:42.518764 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] Starting session document processing engine... Jul 2 07:56:42.615234 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] [EngineProcessor] Starting Jul 2 07:56:42.711959 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Jul 2 07:56:42.808735 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0222d070cf5947928, requestId: 14e580e3-9af4-4b67-bdf3-d2c8d8167957 Jul 2 07:56:42.906464 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [OfflineService] Starting document processing engine... Jul 2 07:56:43.003151 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [OfflineService] [EngineProcessor] Starting Jul 2 07:56:43.100609 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [OfflineService] [EngineProcessor] Initial processing Jul 2 07:56:43.142420 kubelet[1912]: E0702 07:56:43.142339 1912 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:56:43.144975 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:56:43.145160 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:56:43.145458 systemd[1]: kubelet.service: Consumed 1.263s CPU time. Jul 2 07:56:43.198221 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [OfflineService] Starting message polling Jul 2 07:56:43.296297 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [OfflineService] Starting send replies to MDS Jul 2 07:56:43.394301 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [LongRunningPluginsManager] starting long running plugin manager Jul 2 07:56:43.445817 sshd_keygen[1742]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 07:56:43.469366 systemd[1]: Finished sshd-keygen.service. Jul 2 07:56:43.472388 systemd[1]: Starting issuegen.service... Jul 2 07:56:43.478769 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 07:56:43.479013 systemd[1]: Finished issuegen.service. Jul 2 07:56:43.481532 systemd[1]: Starting systemd-user-sessions.service... Jul 2 07:56:43.490218 systemd[1]: Finished systemd-user-sessions.service. Jul 2 07:56:43.492726 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] listening reply. Jul 2 07:56:43.494004 systemd[1]: Started getty@tty1.service. Jul 2 07:56:43.498501 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 07:56:43.500782 systemd[1]: Reached target getty.target. Jul 2 07:56:43.501811 systemd[1]: Reached target multi-user.target. Jul 2 07:56:43.509045 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 07:56:43.526181 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 07:56:43.526391 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 07:56:43.528013 systemd[1]: Startup finished in 812ms (kernel) + 7.656s (initrd) + 11.021s (userspace) = 19.491s. Jul 2 07:56:43.591276 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Jul 2 07:56:43.689890 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Jul 2 07:56:43.788707 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [StartupProcessor] Executing startup processor tasks Jul 2 07:56:43.887806 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Jul 2 07:56:43.986982 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Jul 2 07:56:44.086620 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.5 Jul 2 07:56:44.186502 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0222d070cf5947928?role=subscribe&stream=input Jul 2 07:56:44.286414 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0222d070cf5947928?role=subscribe&stream=input Jul 2 07:56:44.386425 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] Starting receiving message from control channel Jul 2 07:56:44.486789 amazon-ssm-agent[1711]: 2024-07-02 07:56:41 INFO [MessageGatewayService] [EngineProcessor] Initial processing Jul 2 07:56:48.437647 systemd[1]: Created slice system-sshd.slice. Jul 2 07:56:48.444124 systemd[1]: Started sshd@0-172.31.21.43:22-139.178.89.65:47396.service. Jul 2 07:56:48.506012 amazon-ssm-agent[1711]: 2024-07-02 07:56:48 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Jul 2 07:56:48.623694 sshd[1933]: Accepted publickey for core from 139.178.89.65 port 47396 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:48.626178 sshd[1933]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:48.640706 systemd[1]: Created slice user-500.slice. Jul 2 07:56:48.642483 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 07:56:48.646357 systemd-logind[1723]: New session 1 of user core. Jul 2 07:56:48.657320 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 07:56:48.659693 systemd[1]: Starting user@500.service... Jul 2 07:56:48.664682 (systemd)[1936]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:48.762420 systemd[1936]: Queued start job for default target default.target. Jul 2 07:56:48.763096 systemd[1936]: Reached target paths.target. Jul 2 07:56:48.763128 systemd[1936]: Reached target sockets.target. Jul 2 07:56:48.763146 systemd[1936]: Reached target timers.target. Jul 2 07:56:48.763336 systemd[1936]: Reached target basic.target. Jul 2 07:56:48.763407 systemd[1936]: Reached target default.target. Jul 2 07:56:48.763449 systemd[1936]: Startup finished in 90ms. Jul 2 07:56:48.764141 systemd[1]: Started user@500.service. Jul 2 07:56:48.765291 systemd[1]: Started session-1.scope. Jul 2 07:56:48.911727 systemd[1]: Started sshd@1-172.31.21.43:22-139.178.89.65:47408.service. Jul 2 07:56:49.086668 sshd[1945]: Accepted publickey for core from 139.178.89.65 port 47408 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:49.088146 sshd[1945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:49.096121 systemd-logind[1723]: New session 2 of user core. Jul 2 07:56:49.096674 systemd[1]: Started session-2.scope. Jul 2 07:56:49.231692 sshd[1945]: pam_unix(sshd:session): session closed for user core Jul 2 07:56:49.235108 systemd[1]: sshd@1-172.31.21.43:22-139.178.89.65:47408.service: Deactivated successfully. Jul 2 07:56:49.240110 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 07:56:49.241221 systemd-logind[1723]: Session 2 logged out. Waiting for processes to exit. Jul 2 07:56:49.243531 systemd-logind[1723]: Removed session 2. Jul 2 07:56:49.258147 systemd[1]: Started sshd@2-172.31.21.43:22-139.178.89.65:47416.service. Jul 2 07:56:49.433989 sshd[1951]: Accepted publickey for core from 139.178.89.65 port 47416 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:49.435800 sshd[1951]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:49.451872 systemd-logind[1723]: New session 3 of user core. Jul 2 07:56:49.452558 systemd[1]: Started session-3.scope. Jul 2 07:56:49.645474 sshd[1951]: pam_unix(sshd:session): session closed for user core Jul 2 07:56:49.651571 systemd[1]: sshd@2-172.31.21.43:22-139.178.89.65:47416.service: Deactivated successfully. Jul 2 07:56:49.652534 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 07:56:49.654817 systemd-logind[1723]: Session 3 logged out. Waiting for processes to exit. Jul 2 07:56:49.661113 systemd-logind[1723]: Removed session 3. Jul 2 07:56:49.676707 systemd[1]: Started sshd@3-172.31.21.43:22-139.178.89.65:47432.service. Jul 2 07:56:49.854928 sshd[1957]: Accepted publickey for core from 139.178.89.65 port 47432 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:49.857622 sshd[1957]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:49.869951 systemd-logind[1723]: New session 4 of user core. Jul 2 07:56:49.869981 systemd[1]: Started session-4.scope. Jul 2 07:56:50.012537 sshd[1957]: pam_unix(sshd:session): session closed for user core Jul 2 07:56:50.015826 systemd[1]: sshd@3-172.31.21.43:22-139.178.89.65:47432.service: Deactivated successfully. Jul 2 07:56:50.018574 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 07:56:50.020035 systemd-logind[1723]: Session 4 logged out. Waiting for processes to exit. Jul 2 07:56:50.022886 systemd-logind[1723]: Removed session 4. Jul 2 07:56:50.039128 systemd[1]: Started sshd@4-172.31.21.43:22-139.178.89.65:47440.service. Jul 2 07:56:50.221827 sshd[1963]: Accepted publickey for core from 139.178.89.65 port 47440 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:50.222811 sshd[1963]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:50.240742 systemd-logind[1723]: New session 5 of user core. Jul 2 07:56:50.241343 systemd[1]: Started session-5.scope. Jul 2 07:56:50.421801 sudo[1966]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 07:56:50.422287 sudo[1966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:56:50.447130 dbus-daemon[1714]: \xd0m\u0013`eU: received setenforce notice (enforcing=-1316279152) Jul 2 07:56:50.449161 sudo[1966]: pam_unix(sudo:session): session closed for user root Jul 2 07:56:50.473574 sshd[1963]: pam_unix(sshd:session): session closed for user core Jul 2 07:56:50.479814 systemd[1]: sshd@4-172.31.21.43:22-139.178.89.65:47440.service: Deactivated successfully. Jul 2 07:56:50.482281 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 07:56:50.485806 systemd-logind[1723]: Session 5 logged out. Waiting for processes to exit. Jul 2 07:56:50.488546 systemd-logind[1723]: Removed session 5. Jul 2 07:56:50.499225 systemd[1]: Started sshd@5-172.31.21.43:22-139.178.89.65:47456.service. Jul 2 07:56:50.678999 sshd[1970]: Accepted publickey for core from 139.178.89.65 port 47456 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:50.680500 sshd[1970]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:50.691684 systemd-logind[1723]: New session 6 of user core. Jul 2 07:56:50.692343 systemd[1]: Started session-6.scope. Jul 2 07:56:50.817527 sudo[1974]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 07:56:50.817964 sudo[1974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:56:50.831343 sudo[1974]: pam_unix(sudo:session): session closed for user root Jul 2 07:56:50.847472 sudo[1973]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 07:56:50.847869 sudo[1973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:56:50.895655 systemd[1]: Stopping audit-rules.service... Jul 2 07:56:50.901000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:56:50.902224 auditctl[1977]: No rules Jul 2 07:56:50.904891 kernel: kauditd_printk_skb: 232 callbacks suppressed Jul 2 07:56:50.905010 kernel: audit: type=1305 audit(1719907010.901:215): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:56:50.902874 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 07:56:50.903097 systemd[1]: Stopped audit-rules.service. Jul 2 07:56:50.910176 kernel: audit: type=1300 audit(1719907010.901:215): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe1c5740f0 a2=420 a3=0 items=0 ppid=1 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:50.901000 audit[1977]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe1c5740f0 a2=420 a3=0 items=0 ppid=1 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:50.905681 systemd[1]: Starting audit-rules.service... Jul 2 07:56:50.901000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:56:50.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:50.934582 kernel: audit: type=1327 audit(1719907010.901:215): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:56:50.934832 kernel: audit: type=1131 audit(1719907010.902:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:50.978441 augenrules[1994]: No rules Jul 2 07:56:50.979303 systemd[1]: Finished audit-rules.service. Jul 2 07:56:50.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:50.992172 sudo[1973]: pam_unix(sudo:session): session closed for user root Jul 2 07:56:51.000206 kernel: audit: type=1130 audit(1719907010.978:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.000367 kernel: audit: type=1106 audit(1719907010.991:218): pid=1973 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:50.991000 audit[1973]: USER_END pid=1973 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:50.991000 audit[1973]: CRED_DISP pid=1973 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.008700 kernel: audit: type=1104 audit(1719907010.991:219): pid=1973 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.020376 sshd[1970]: pam_unix(sshd:session): session closed for user core Jul 2 07:56:51.023000 audit[1970]: USER_END pid=1970 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.025610 systemd[1]: sshd@5-172.31.21.43:22-139.178.89.65:47456.service: Deactivated successfully. Jul 2 07:56:51.026784 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 07:56:51.028496 systemd-logind[1723]: Session 6 logged out. Waiting for processes to exit. Jul 2 07:56:51.023000 audit[1970]: CRED_DISP pid=1970 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.029663 systemd-logind[1723]: Removed session 6. Jul 2 07:56:51.033729 kernel: audit: type=1106 audit(1719907011.023:220): pid=1970 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.034029 kernel: audit: type=1104 audit(1719907011.023:221): pid=1970 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.034074 kernel: audit: type=1131 audit(1719907011.025:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.21.43:22-139.178.89.65:47456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.025000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.21.43:22-139.178.89.65:47456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.042599 systemd[1]: Started sshd@6-172.31.21.43:22-139.178.89.65:47462.service. Jul 2 07:56:51.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.43:22-139.178.89.65:47462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.201000 audit[2000]: USER_ACCT pid=2000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.202526 sshd[2000]: Accepted publickey for core from 139.178.89.65 port 47462 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:56:51.203000 audit[2000]: CRED_ACQ pid=2000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.203000 audit[2000]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3455b590 a2=3 a3=0 items=0 ppid=1 pid=2000 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.203000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:56:51.204649 sshd[2000]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:56:51.220506 systemd[1]: Started session-7.scope. Jul 2 07:56:51.223081 systemd-logind[1723]: New session 7 of user core. Jul 2 07:56:51.256000 audit[2000]: USER_START pid=2000 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.259000 audit[2002]: CRED_ACQ pid=2002 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:56:51.352000 audit[2003]: USER_ACCT pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.353594 sudo[2003]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 07:56:51.352000 audit[2003]: CRED_REFR pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.353944 sudo[2003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:56:51.354000 audit[2003]: USER_START pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:56:51.406477 systemd[1]: Starting docker.service... Jul 2 07:56:51.483883 env[2013]: time="2024-07-02T07:56:51.482980239Z" level=info msg="Starting up" Jul 2 07:56:51.485391 env[2013]: time="2024-07-02T07:56:51.485348305Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:56:51.485391 env[2013]: time="2024-07-02T07:56:51.485375143Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:56:51.485557 env[2013]: time="2024-07-02T07:56:51.485410898Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:56:51.485557 env[2013]: time="2024-07-02T07:56:51.485424907Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:56:51.487429 env[2013]: time="2024-07-02T07:56:51.487393174Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:56:51.487429 env[2013]: time="2024-07-02T07:56:51.487417606Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:56:51.487601 env[2013]: time="2024-07-02T07:56:51.487437983Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:56:51.487601 env[2013]: time="2024-07-02T07:56:51.487450565Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:56:51.496775 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1643001798-merged.mount: Deactivated successfully. Jul 2 07:56:51.549057 env[2013]: time="2024-07-02T07:56:51.549021987Z" level=info msg="Loading containers: start." Jul 2 07:56:51.646000 audit[2044]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=2044 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.646000 audit[2044]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fffe6ca89c0 a2=0 a3=7fffe6ca89ac items=0 ppid=2013 pid=2044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.646000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 07:56:51.650000 audit[2046]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=2046 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.650000 audit[2046]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffffc1e3090 a2=0 a3=7ffffc1e307c items=0 ppid=2013 pid=2046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.650000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 07:56:51.652000 audit[2048]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=2048 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.652000 audit[2048]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc14c16eb0 a2=0 a3=7ffc14c16e9c items=0 ppid=2013 pid=2048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.652000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:56:51.656000 audit[2050]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=2050 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.656000 audit[2050]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff5e6cad80 a2=0 a3=7fff5e6cad6c items=0 ppid=2013 pid=2050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.656000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:56:51.658000 audit[2052]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=2052 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.658000 audit[2052]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffff69dac70 a2=0 a3=7ffff69dac5c items=0 ppid=2013 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.658000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 07:56:51.684000 audit[2057]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=2057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.684000 audit[2057]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffe5fcc570 a2=0 a3=7fffe5fcc55c items=0 ppid=2013 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.684000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 07:56:51.699000 audit[2059]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=2059 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.699000 audit[2059]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffce8bbdde0 a2=0 a3=7ffce8bbddcc items=0 ppid=2013 pid=2059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.699000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 07:56:51.704000 audit[2061]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=2061 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.704000 audit[2061]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fffbb9aa950 a2=0 a3=7fffbb9aa93c items=0 ppid=2013 pid=2061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.704000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 07:56:51.709000 audit[2063]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=2063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.709000 audit[2063]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff49cfce20 a2=0 a3=7fff49cfce0c items=0 ppid=2013 pid=2063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.709000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:56:51.730000 audit[2067]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=2067 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.730000 audit[2067]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc20196ba0 a2=0 a3=7ffc20196b8c items=0 ppid=2013 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.730000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:56:51.732000 audit[2068]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=2068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.732000 audit[2068]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd81127530 a2=0 a3=7ffd8112751c items=0 ppid=2013 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.732000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:56:51.755886 kernel: Initializing XFRM netlink socket Jul 2 07:56:51.803449 env[2013]: time="2024-07-02T07:56:51.803181411Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 07:56:51.805640 systemd-timesyncd[1680]: Network configuration changed, trying to establish connection. Jul 2 07:56:51.810093 (udev-worker)[2023]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:56:51.874000 audit[2076]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=2076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.874000 audit[2076]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffee5bad2e0 a2=0 a3=7ffee5bad2cc items=0 ppid=2013 pid=2076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.874000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 07:56:51.975000 audit[2079]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=2079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.975000 audit[2079]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdc94b1a50 a2=0 a3=7ffdc94b1a3c items=0 ppid=2013 pid=2079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.975000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 07:56:51.980000 audit[2082]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.980000 audit[2082]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd56d5ea20 a2=0 a3=7ffd56d5ea0c items=0 ppid=2013 pid=2082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 07:56:51.983000 audit[2084]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2084 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.983000 audit[2084]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffc82a48e0 a2=0 a3=7fffc82a48cc items=0 ppid=2013 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.983000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 07:56:51.985000 audit[2086]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.985000 audit[2086]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe5a632520 a2=0 a3=7ffe5a63250c items=0 ppid=2013 pid=2086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 07:56:51.988000 audit[2088]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.988000 audit[2088]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe0f216790 a2=0 a3=7ffe0f21677c items=0 ppid=2013 pid=2088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.988000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 07:56:51.991000 audit[2090]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2090 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:51.991000 audit[2090]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd39505520 a2=0 a3=7ffd3950550c items=0 ppid=2013 pid=2090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:51.991000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 07:56:52.000000 audit[2093]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2093 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:52.000000 audit[2093]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff174c2bb0 a2=0 a3=7fff174c2b9c items=0 ppid=2013 pid=2093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:52.000000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 07:56:52.003000 audit[2095]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:52.003000 audit[2095]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffece6738c0 a2=0 a3=7ffece6738ac items=0 ppid=2013 pid=2095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:52.003000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:56:52.006000 audit[2097]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:52.006000 audit[2097]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc275813b0 a2=0 a3=7ffc2758139c items=0 ppid=2013 pid=2097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:52.006000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:56:52.008000 audit[2099]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:52.008000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe980af760 a2=0 a3=7ffe980af74c items=0 ppid=2013 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:52.008000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 07:56:52.010157 systemd-networkd[1458]: docker0: Link UP Jul 2 07:56:52.022000 audit[2103]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2103 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:52.022000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd03c49510 a2=0 a3=7ffd03c494fc items=0 ppid=2013 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:52.022000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:56:52.023000 audit[2104]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2104 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:56:52.023000 audit[2104]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffa49fa8b0 a2=0 a3=7fffa49fa89c items=0 ppid=2013 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:56:52.023000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:56:52.024789 env[2013]: time="2024-07-02T07:56:52.024752835Z" level=info msg="Loading containers: done." Jul 2 07:56:52.038086 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2115094655-merged.mount: Deactivated successfully. Jul 2 07:56:52.061946 env[2013]: time="2024-07-02T07:56:52.060831713Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 07:56:52.061946 env[2013]: time="2024-07-02T07:56:52.061105039Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 07:56:52.061946 env[2013]: time="2024-07-02T07:56:52.061529182Z" level=info msg="Daemon has completed initialization" Jul 2 07:56:53.337177 systemd-resolved[1679]: Clock change detected. Flushing caches. Jul 2 07:56:53.337637 systemd-timesyncd[1680]: Contacted time server 69.10.223.132:123 (2.flatcar.pool.ntp.org). Jul 2 07:56:53.337989 systemd-timesyncd[1680]: Initial clock synchronization to Tue 2024-07-02 07:56:53.336466 UTC. Jul 2 07:56:53.346679 systemd[1]: Started docker.service. Jul 2 07:56:53.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:53.358823 env[2013]: time="2024-07-02T07:56:53.358625298Z" level=info msg="API listen on /run/docker.sock" Jul 2 07:56:54.625931 env[1729]: time="2024-07-02T07:56:54.625875696Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.11\"" Jul 2 07:56:54.655224 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 07:56:54.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:54.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:54.655503 systemd[1]: Stopped kubelet.service. Jul 2 07:56:54.655602 systemd[1]: kubelet.service: Consumed 1.263s CPU time. Jul 2 07:56:54.659592 systemd[1]: Starting kubelet.service... Jul 2 07:56:55.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:56:55.039405 systemd[1]: Started kubelet.service. Jul 2 07:56:55.137981 kubelet[2145]: E0702 07:56:55.137926 2145 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:56:55.156222 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:56:55.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:56:55.156463 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:56:55.406112 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3359538734.mount: Deactivated successfully. Jul 2 07:56:57.780630 env[1729]: time="2024-07-02T07:56:57.780569765Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:56:57.783661 env[1729]: time="2024-07-02T07:56:57.783615131Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b2de212bf8c1b7b0d1b2703356ac7ddcfccaadfcdcd32c1ae914b6078d11e524,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:56:57.786380 env[1729]: time="2024-07-02T07:56:57.786336885Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:56:57.789239 env[1729]: time="2024-07-02T07:56:57.789191482Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:aec9d1701c304eee8607d728a39baaa511d65bef6dd9861010618f63fbadeb10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:56:57.790096 env[1729]: time="2024-07-02T07:56:57.790056625Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.11\" returns image reference \"sha256:b2de212bf8c1b7b0d1b2703356ac7ddcfccaadfcdcd32c1ae914b6078d11e524\"" Jul 2 07:56:57.802617 env[1729]: time="2024-07-02T07:56:57.802576645Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.11\"" Jul 2 07:57:00.594436 env[1729]: time="2024-07-02T07:57:00.594359982Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:00.599114 env[1729]: time="2024-07-02T07:57:00.599066978Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:20145ae80ad309fd0c963e2539f6ef0be795ace696539514894b290892c1884b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:00.604274 env[1729]: time="2024-07-02T07:57:00.604225610Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:00.609889 env[1729]: time="2024-07-02T07:57:00.609844218Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6014c3572ec683841bbb16f87b94da28ee0254b95e2dba2d1850d62bd0111f09,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:00.610861 env[1729]: time="2024-07-02T07:57:00.610822757Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.11\" returns image reference \"sha256:20145ae80ad309fd0c963e2539f6ef0be795ace696539514894b290892c1884b\"" Jul 2 07:57:00.636766 env[1729]: time="2024-07-02T07:57:00.636725914Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.11\"" Jul 2 07:57:02.188338 env[1729]: time="2024-07-02T07:57:02.188279029Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:02.192865 env[1729]: time="2024-07-02T07:57:02.192812235Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:12c62a5a0745d200eb8333ea6244f6d6328e64c5c3b645a4ade456cc645399b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:02.196017 env[1729]: time="2024-07-02T07:57:02.195968484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:02.199628 env[1729]: time="2024-07-02T07:57:02.199579889Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:46cf7475c8daffb743c856a1aea0ddea35e5acd2418be18b1e22cf98d9c9b445,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:02.200965 env[1729]: time="2024-07-02T07:57:02.200919668Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.11\" returns image reference \"sha256:12c62a5a0745d200eb8333ea6244f6d6328e64c5c3b645a4ade456cc645399b9\"" Jul 2 07:57:02.217905 env[1729]: time="2024-07-02T07:57:02.217863504Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.11\"" Jul 2 07:57:03.598367 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1582019301.mount: Deactivated successfully. Jul 2 07:57:04.630945 env[1729]: time="2024-07-02T07:57:04.630891615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:04.634036 env[1729]: time="2024-07-02T07:57:04.633988669Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a3eea76ce409e136fe98838847fda217ce169eb7d1ceef544671d75f68e5a29c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:04.636696 env[1729]: time="2024-07-02T07:57:04.636651691Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.11,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:04.639728 env[1729]: time="2024-07-02T07:57:04.639685955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:ae4b671d4cfc23dd75030bb4490207cd939b3b11a799bcb4119698cd712eb5b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:04.640380 env[1729]: time="2024-07-02T07:57:04.640336951Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.11\" returns image reference \"sha256:a3eea76ce409e136fe98838847fda217ce169eb7d1ceef544671d75f68e5a29c\"" Jul 2 07:57:04.658394 env[1729]: time="2024-07-02T07:57:04.658353410Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 07:57:05.171721 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount596943628.mount: Deactivated successfully. Jul 2 07:57:05.173867 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 07:57:05.176646 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 07:57:05.176774 kernel: audit: type=1130 audit(1719907025.174:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:05.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:05.174230 systemd[1]: Stopped kubelet.service. Jul 2 07:57:05.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:05.182007 systemd[1]: Starting kubelet.service... Jul 2 07:57:05.187225 kernel: audit: type=1131 audit(1719907025.176:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:05.194084 env[1729]: time="2024-07-02T07:57:05.194040109Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:05.200345 env[1729]: time="2024-07-02T07:57:05.200296273Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:05.218000 env[1729]: time="2024-07-02T07:57:05.217928628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:05.229657 env[1729]: time="2024-07-02T07:57:05.229613233Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:05.230290 env[1729]: time="2024-07-02T07:57:05.230257055Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Jul 2 07:57:05.265506 env[1729]: time="2024-07-02T07:57:05.265456656Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Jul 2 07:57:05.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:05.502892 systemd[1]: Started kubelet.service. Jul 2 07:57:05.512732 kernel: audit: type=1130 audit(1719907025.502:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:05.611628 kubelet[2183]: E0702 07:57:05.611505 2183 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:57:05.614778 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:57:05.615051 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:57:05.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:57:05.619572 kernel: audit: type=1131 audit(1719907025.614:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:57:05.873446 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3533957628.mount: Deactivated successfully. Jul 2 07:57:08.435815 env[1729]: time="2024-07-02T07:57:08.435749174Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:08.440406 env[1729]: time="2024-07-02T07:57:08.440360340Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:08.443472 env[1729]: time="2024-07-02T07:57:08.443431542Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:08.446811 env[1729]: time="2024-07-02T07:57:08.446764121Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:08.447635 env[1729]: time="2024-07-02T07:57:08.447597011Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7\"" Jul 2 07:57:08.461153 env[1729]: time="2024-07-02T07:57:08.461104266Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Jul 2 07:57:09.009551 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1691486588.mount: Deactivated successfully. Jul 2 07:57:09.763213 env[1729]: time="2024-07-02T07:57:09.763156950Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:09.766683 env[1729]: time="2024-07-02T07:57:09.766638700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:09.768609 env[1729]: time="2024-07-02T07:57:09.768571361Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:09.771012 env[1729]: time="2024-07-02T07:57:09.770954636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:09.771876 env[1729]: time="2024-07-02T07:57:09.771839625Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Jul 2 07:57:12.361169 kernel: audit: type=1131 audit(1719907032.346:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:12.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:12.342637 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Jul 2 07:57:12.386957 kernel: audit: type=1334 audit(1719907032.380:266): prog-id=46 op=UNLOAD Jul 2 07:57:12.388772 kernel: audit: type=1334 audit(1719907032.380:267): prog-id=45 op=UNLOAD Jul 2 07:57:12.380000 audit: BPF prog-id=46 op=UNLOAD Jul 2 07:57:12.380000 audit: BPF prog-id=45 op=UNLOAD Jul 2 07:57:12.380000 audit: BPF prog-id=44 op=UNLOAD Jul 2 07:57:12.391681 kernel: audit: type=1334 audit(1719907032.380:268): prog-id=44 op=UNLOAD Jul 2 07:57:13.172645 systemd[1]: Stopped kubelet.service. Jul 2 07:57:13.182734 kernel: audit: type=1130 audit(1719907033.172:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:13.182858 kernel: audit: type=1131 audit(1719907033.172:270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:13.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:13.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:13.177347 systemd[1]: Starting kubelet.service... Jul 2 07:57:13.208770 systemd[1]: Reloading. Jul 2 07:57:13.352371 /usr/lib/systemd/system-generators/torcx-generator[2283]: time="2024-07-02T07:57:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:57:13.354580 /usr/lib/systemd/system-generators/torcx-generator[2283]: time="2024-07-02T07:57:13Z" level=info msg="torcx already run" Jul 2 07:57:13.508733 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:57:13.509116 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:57:13.549356 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:57:13.657595 kernel: audit: type=1400 audit(1719907033.649:271): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657740 kernel: audit: type=1400 audit(1719907033.649:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.664889 kernel: audit: type=1400 audit(1719907033.649:273): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.664986 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.649000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.653000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.653000 audit: BPF prog-id=49 op=LOAD Jul 2 07:57:13.653000 audit: BPF prog-id=47 op=UNLOAD Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit: BPF prog-id=50 op=LOAD Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.657000 audit: BPF prog-id=51 op=LOAD Jul 2 07:57:13.657000 audit: BPF prog-id=30 op=UNLOAD Jul 2 07:57:13.657000 audit: BPF prog-id=31 op=UNLOAD Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.658000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit: BPF prog-id=52 op=LOAD Jul 2 07:57:13.659000 audit: BPF prog-id=41 op=UNLOAD Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit: BPF prog-id=53 op=LOAD Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.659000 audit: BPF prog-id=54 op=LOAD Jul 2 07:57:13.659000 audit: BPF prog-id=42 op=UNLOAD Jul 2 07:57:13.659000 audit: BPF prog-id=43 op=UNLOAD Jul 2 07:57:13.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.668000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.669000 audit: BPF prog-id=58 op=LOAD Jul 2 07:57:13.669000 audit: BPF prog-id=35 op=UNLOAD Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.671000 audit: BPF prog-id=59 op=LOAD Jul 2 07:57:13.671000 audit: BPF prog-id=40 op=UNLOAD Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.673000 audit: BPF prog-id=60 op=LOAD Jul 2 07:57:13.673000 audit: BPF prog-id=39 op=UNLOAD Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit: BPF prog-id=61 op=LOAD Jul 2 07:57:13.675000 audit: BPF prog-id=36 op=UNLOAD Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit: BPF prog-id=62 op=LOAD Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:13.675000 audit: BPF prog-id=63 op=LOAD Jul 2 07:57:13.675000 audit: BPF prog-id=37 op=UNLOAD Jul 2 07:57:13.675000 audit: BPF prog-id=38 op=UNLOAD Jul 2 07:57:13.705114 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 2 07:57:13.705222 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 2 07:57:13.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:57:13.705526 systemd[1]: Stopped kubelet.service. Jul 2 07:57:13.716412 systemd[1]: Starting kubelet.service... Jul 2 07:57:14.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:14.168165 systemd[1]: Started kubelet.service. Jul 2 07:57:14.229815 kubelet[2340]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:57:14.230159 kubelet[2340]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:57:14.230201 kubelet[2340]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:57:14.230334 kubelet[2340]: I0702 07:57:14.230306 2340 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:57:14.950897 kubelet[2340]: I0702 07:57:14.950864 2340 server.go:467] "Kubelet version" kubeletVersion="v1.28.7" Jul 2 07:57:14.951111 kubelet[2340]: I0702 07:57:14.951102 2340 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:57:14.951465 kubelet[2340]: I0702 07:57:14.951449 2340 server.go:895] "Client rotation is on, will bootstrap in background" Jul 2 07:57:14.990557 kubelet[2340]: I0702 07:57:14.990511 2340 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:57:14.995145 kubelet[2340]: E0702 07:57:14.995119 2340 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.21.43:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.013681 kubelet[2340]: I0702 07:57:15.013646 2340 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:57:15.014789 kubelet[2340]: I0702 07:57:15.014763 2340 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:57:15.015007 kubelet[2340]: I0702 07:57:15.014984 2340 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:57:15.015259 kubelet[2340]: I0702 07:57:15.015015 2340 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:57:15.015259 kubelet[2340]: I0702 07:57:15.015029 2340 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:57:15.016032 kubelet[2340]: I0702 07:57:15.016010 2340 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:57:15.017880 kubelet[2340]: I0702 07:57:15.017859 2340 kubelet.go:393] "Attempting to sync node with API server" Jul 2 07:57:15.017971 kubelet[2340]: I0702 07:57:15.017888 2340 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:57:15.017971 kubelet[2340]: I0702 07:57:15.017921 2340 kubelet.go:309] "Adding apiserver pod source" Jul 2 07:57:15.017971 kubelet[2340]: I0702 07:57:15.017941 2340 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:57:15.022062 kubelet[2340]: I0702 07:57:15.022033 2340 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:57:15.033567 kubelet[2340]: W0702 07:57:15.032979 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.21.43:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.033567 kubelet[2340]: E0702 07:57:15.033079 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.21.43:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.033567 kubelet[2340]: W0702 07:57:15.033165 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.21.43:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-43&limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.033567 kubelet[2340]: E0702 07:57:15.033206 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.21.43:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-43&limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.035618 kubelet[2340]: W0702 07:57:15.035590 2340 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 07:57:15.036268 kubelet[2340]: I0702 07:57:15.036239 2340 server.go:1232] "Started kubelet" Jul 2 07:57:15.036448 kubelet[2340]: I0702 07:57:15.036423 2340 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:57:15.037714 kubelet[2340]: I0702 07:57:15.037693 2340 server.go:462] "Adding debug handlers to kubelet server" Jul 2 07:57:15.039517 kubelet[2340]: I0702 07:57:15.039488 2340 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Jul 2 07:57:15.039828 kubelet[2340]: I0702 07:57:15.039789 2340 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:57:15.044990 kubelet[2340]: E0702 07:57:15.044957 2340 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Jul 2 07:57:15.044990 kubelet[2340]: E0702 07:57:15.044997 2340 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:57:15.045391 kubelet[2340]: E0702 07:57:15.045275 2340 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-21-43.17de5655fe075246", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-21-43", UID:"ip-172-31-21-43", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-21-43"}, FirstTimestamp:time.Date(2024, time.July, 2, 7, 57, 15, 36209734, time.Local), LastTimestamp:time.Date(2024, time.July, 2, 7, 57, 15, 36209734, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-21-43"}': 'Post "https://172.31.21.43:6443/api/v1/namespaces/default/events": dial tcp 172.31.21.43:6443: connect: connection refused'(may retry after sleeping) Jul 2 07:57:15.045000 audit[2340]: AVC avc: denied { mac_admin } for pid=2340 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:15.045000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:57:15.045000 audit[2340]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000976b40 a1=c000819f50 a2=c000976b10 a3=25 items=0 ppid=1 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.045000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:57:15.046461 kubelet[2340]: I0702 07:57:15.046445 2340 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:57:15.046000 audit[2340]: AVC avc: denied { mac_admin } for pid=2340 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:15.046000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:57:15.046000 audit[2340]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008c2a00 a1=c000819f68 a2=c000976bd0 a3=25 items=0 ppid=1 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.046000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:57:15.047690 kubelet[2340]: I0702 07:57:15.047662 2340 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:57:15.047817 kubelet[2340]: I0702 07:57:15.047797 2340 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:57:15.051638 kubelet[2340]: E0702 07:57:15.050058 2340 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-21-43\" not found" Jul 2 07:57:15.051638 kubelet[2340]: I0702 07:57:15.050095 2340 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:57:15.051638 kubelet[2340]: I0702 07:57:15.050192 2340 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 07:57:15.051638 kubelet[2340]: I0702 07:57:15.050267 2340 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 07:57:15.051638 kubelet[2340]: W0702 07:57:15.050720 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.21.43:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.051638 kubelet[2340]: E0702 07:57:15.050777 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.21.43:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.051638 kubelet[2340]: E0702 07:57:15.051346 2340 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.43:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-43?timeout=10s\": dial tcp 172.31.21.43:6443: connect: connection refused" interval="200ms" Jul 2 07:57:15.055000 audit[2350]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.055000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff5193be70 a2=0 a3=7fff5193be5c items=0 ppid=2340 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:57:15.058000 audit[2351]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.058000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe3e96fe10 a2=0 a3=7ffe3e96fdfc items=0 ppid=2340 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.058000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:57:15.063000 audit[2353]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.063000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff0d8c2f00 a2=0 a3=7fff0d8c2eec items=0 ppid=2340 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:57:15.076000 audit[2355]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.076000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd487979e0 a2=0 a3=7ffd487979cc items=0 ppid=2340 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.076000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:57:15.094000 audit[2361]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.094000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc7ce41e90 a2=0 a3=7ffc7ce41e7c items=0 ppid=2340 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.094000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 07:57:15.097000 audit[2363]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.097000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc53658b20 a2=0 a3=7ffc53658b0c items=0 ppid=2340 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.097000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:57:15.100238 kubelet[2340]: I0702 07:57:15.094948 2340 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:57:15.100000 audit[2364]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.100000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec4be03f0 a2=0 a3=7ffec4be03dc items=0 ppid=2340 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.100000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:57:15.103000 audit[2362]: NETFILTER_CFG table=mangle:33 family=10 entries=2 op=nft_register_chain pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:15.103000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcb975e310 a2=0 a3=7ffcb975e2fc items=0 ppid=2340 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.103000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:57:15.103000 audit[2367]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:15.103000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffaa019c90 a2=0 a3=10e3 items=0 ppid=2340 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:57:15.104766 kubelet[2340]: I0702 07:57:15.102323 2340 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:57:15.104766 kubelet[2340]: I0702 07:57:15.102341 2340 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:57:15.104766 kubelet[2340]: I0702 07:57:15.102362 2340 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:57:15.105011 kubelet[2340]: I0702 07:57:15.104994 2340 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:57:15.105112 kubelet[2340]: I0702 07:57:15.105103 2340 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:57:15.105254 kubelet[2340]: I0702 07:57:15.105244 2340 kubelet.go:2303] "Starting kubelet main sync loop" Jul 2 07:57:15.105362 kubelet[2340]: E0702 07:57:15.105353 2340 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:57:15.107446 kubelet[2340]: W0702 07:57:15.107391 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.21.43:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.109472 kubelet[2340]: E0702 07:57:15.107786 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.21.43:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:15.112485 kubelet[2340]: I0702 07:57:15.112059 2340 policy_none.go:49] "None policy: Start" Jul 2 07:57:15.113052 kubelet[2340]: I0702 07:57:15.113037 2340 memory_manager.go:169] "Starting memorymanager" policy="None" Jul 2 07:57:15.113266 kubelet[2340]: I0702 07:57:15.113251 2340 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:57:15.115000 audit[2368]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:15.115000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcd316cc50 a2=0 a3=7ffcd316cc3c items=0 ppid=2340 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.115000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:57:15.117000 audit[2369]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:15.117000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdd03089f0 a2=0 a3=7ffdd03089dc items=0 ppid=2340 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.117000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:57:15.118000 audit[2370]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:15.118000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcee533e90 a2=0 a3=7ffcee533e7c items=0 ppid=2340 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.118000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:57:15.129984 systemd[1]: Created slice kubepods.slice. Jul 2 07:57:15.135926 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 07:57:15.140326 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 07:57:15.147804 kubelet[2340]: I0702 07:57:15.147771 2340 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:57:15.147000 audit[2340]: AVC avc: denied { mac_admin } for pid=2340 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:15.147000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:57:15.147000 audit[2340]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000596e10 a1=c000818240 a2=c000596de0 a3=25 items=0 ppid=1 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:15.147000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:57:15.148682 kubelet[2340]: I0702 07:57:15.147854 2340 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:57:15.148682 kubelet[2340]: I0702 07:57:15.148070 2340 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:57:15.150224 kubelet[2340]: E0702 07:57:15.150202 2340 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-21-43\" not found" Jul 2 07:57:15.153771 kubelet[2340]: I0702 07:57:15.153747 2340 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-43" Jul 2 07:57:15.154197 kubelet[2340]: E0702 07:57:15.154169 2340 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.43:6443/api/v1/nodes\": dial tcp 172.31.21.43:6443: connect: connection refused" node="ip-172-31-21-43" Jul 2 07:57:15.207520 kubelet[2340]: I0702 07:57:15.206985 2340 topology_manager.go:215] "Topology Admit Handler" podUID="03ff386879016110fe820985b8c3f234" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-21-43" Jul 2 07:57:15.211910 kubelet[2340]: I0702 07:57:15.210155 2340 topology_manager.go:215] "Topology Admit Handler" podUID="e104ec39f187f32c56b77afa779a9f29" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:15.213909 kubelet[2340]: I0702 07:57:15.213887 2340 topology_manager.go:215] "Topology Admit Handler" podUID="ca1761a20d3c6a12cc1c2fd6448f01c5" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-21-43" Jul 2 07:57:15.224593 systemd[1]: Created slice kubepods-burstable-pod03ff386879016110fe820985b8c3f234.slice. Jul 2 07:57:15.234907 systemd[1]: Created slice kubepods-burstable-pode104ec39f187f32c56b77afa779a9f29.slice. Jul 2 07:57:15.245501 systemd[1]: Created slice kubepods-burstable-podca1761a20d3c6a12cc1c2fd6448f01c5.slice. Jul 2 07:57:15.252580 kubelet[2340]: E0702 07:57:15.252524 2340 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.43:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-43?timeout=10s\": dial tcp 172.31.21.43:6443: connect: connection refused" interval="400ms" Jul 2 07:57:15.352096 kubelet[2340]: I0702 07:57:15.352044 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/03ff386879016110fe820985b8c3f234-k8s-certs\") pod \"kube-apiserver-ip-172-31-21-43\" (UID: \"03ff386879016110fe820985b8c3f234\") " pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:15.352362 kubelet[2340]: I0702 07:57:15.352107 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:15.352362 kubelet[2340]: I0702 07:57:15.352138 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-k8s-certs\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:15.352362 kubelet[2340]: I0702 07:57:15.352168 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:15.352362 kubelet[2340]: I0702 07:57:15.352195 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/03ff386879016110fe820985b8c3f234-ca-certs\") pod \"kube-apiserver-ip-172-31-21-43\" (UID: \"03ff386879016110fe820985b8c3f234\") " pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:15.352362 kubelet[2340]: I0702 07:57:15.352223 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/03ff386879016110fe820985b8c3f234-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-21-43\" (UID: \"03ff386879016110fe820985b8c3f234\") " pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:15.352628 kubelet[2340]: I0702 07:57:15.352340 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-ca-certs\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:15.352628 kubelet[2340]: I0702 07:57:15.352373 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-kubeconfig\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:15.352628 kubelet[2340]: I0702 07:57:15.352408 2340 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ca1761a20d3c6a12cc1c2fd6448f01c5-kubeconfig\") pod \"kube-scheduler-ip-172-31-21-43\" (UID: \"ca1761a20d3c6a12cc1c2fd6448f01c5\") " pod="kube-system/kube-scheduler-ip-172-31-21-43" Jul 2 07:57:15.356869 kubelet[2340]: I0702 07:57:15.356840 2340 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-43" Jul 2 07:57:15.357216 kubelet[2340]: E0702 07:57:15.357192 2340 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.43:6443/api/v1/nodes\": dial tcp 172.31.21.43:6443: connect: connection refused" node="ip-172-31-21-43" Jul 2 07:57:15.534107 env[1729]: time="2024-07-02T07:57:15.534056810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-21-43,Uid:03ff386879016110fe820985b8c3f234,Namespace:kube-system,Attempt:0,}" Jul 2 07:57:15.539129 env[1729]: time="2024-07-02T07:57:15.539083439Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-21-43,Uid:e104ec39f187f32c56b77afa779a9f29,Namespace:kube-system,Attempt:0,}" Jul 2 07:57:15.549478 env[1729]: time="2024-07-02T07:57:15.549423482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-21-43,Uid:ca1761a20d3c6a12cc1c2fd6448f01c5,Namespace:kube-system,Attempt:0,}" Jul 2 07:57:15.654031 kubelet[2340]: E0702 07:57:15.653988 2340 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.43:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-43?timeout=10s\": dial tcp 172.31.21.43:6443: connect: connection refused" interval="800ms" Jul 2 07:57:15.759588 kubelet[2340]: I0702 07:57:15.759558 2340 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-43" Jul 2 07:57:15.760047 kubelet[2340]: E0702 07:57:15.760023 2340 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.43:6443/api/v1/nodes\": dial tcp 172.31.21.43:6443: connect: connection refused" node="ip-172-31-21-43" Jul 2 07:57:16.016139 kubelet[2340]: W0702 07:57:16.016080 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.21.43:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.016139 kubelet[2340]: E0702 07:57:16.016144 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.21.43:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.056414 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3319780262.mount: Deactivated successfully. Jul 2 07:57:16.089595 env[1729]: time="2024-07-02T07:57:16.089523244Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.091607 env[1729]: time="2024-07-02T07:57:16.091560947Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.099279 env[1729]: time="2024-07-02T07:57:16.099156337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.102102 env[1729]: time="2024-07-02T07:57:16.101977500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.103506 env[1729]: time="2024-07-02T07:57:16.103470388Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.107664 env[1729]: time="2024-07-02T07:57:16.107411188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.109590 env[1729]: time="2024-07-02T07:57:16.109555889Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.111896 env[1729]: time="2024-07-02T07:57:16.111856325Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.113476 env[1729]: time="2024-07-02T07:57:16.113427642Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.115155 env[1729]: time="2024-07-02T07:57:16.115118993Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.117124 env[1729]: time="2024-07-02T07:57:16.117085499Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.129372 env[1729]: time="2024-07-02T07:57:16.129320697Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:16.164103 env[1729]: time="2024-07-02T07:57:16.164003967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:16.164103 env[1729]: time="2024-07-02T07:57:16.164057631Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:16.164103 env[1729]: time="2024-07-02T07:57:16.164073050Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:16.173103 env[1729]: time="2024-07-02T07:57:16.165311047Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96 pid=2380 runtime=io.containerd.runc.v2 Jul 2 07:57:16.203658 systemd[1]: Started cri-containerd-5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96.scope. Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.242000 audit: BPF prog-id=64 op=LOAD Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2380 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566343563323237303464626464373732383138396137653639353664 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2380 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566343563323237303464626464373732383138396137653639353664 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit: BPF prog-id=65 op=LOAD Jul 2 07:57:16.243000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00020ef60 items=0 ppid=2380 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566343563323237303464626464373732383138396137653639353664 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.243000 audit: BPF prog-id=66 op=LOAD Jul 2 07:57:16.243000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00020efa8 items=0 ppid=2380 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566343563323237303464626464373732383138396137653639353664 Jul 2 07:57:16.244000 audit: BPF prog-id=66 op=UNLOAD Jul 2 07:57:16.244000 audit: BPF prog-id=65 op=UNLOAD Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.244000 audit: BPF prog-id=67 op=LOAD Jul 2 07:57:16.244000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00020f3b8 items=0 ppid=2380 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566343563323237303464626464373732383138396137653639353664 Jul 2 07:57:16.257024 env[1729]: time="2024-07-02T07:57:16.256939817Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:16.257585 env[1729]: time="2024-07-02T07:57:16.257490635Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:16.258161 env[1729]: time="2024-07-02T07:57:16.258099239Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:16.259191 env[1729]: time="2024-07-02T07:57:16.259052856Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/53d692cb33134eec3f9a3ec8e4eca88374432636ef6f6f3d077b6889daf8869e pid=2420 runtime=io.containerd.runc.v2 Jul 2 07:57:16.259191 env[1729]: time="2024-07-02T07:57:16.258938362Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:16.259191 env[1729]: time="2024-07-02T07:57:16.258993750Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:16.259191 env[1729]: time="2024-07-02T07:57:16.259011693Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:16.260610 env[1729]: time="2024-07-02T07:57:16.259418151Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a pid=2423 runtime=io.containerd.runc.v2 Jul 2 07:57:16.308201 systemd[1]: Started cri-containerd-60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a.scope. Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.334000 audit: BPF prog-id=68 op=LOAD Jul 2 07:57:16.335000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.335000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2423 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630633337353165313238616230363736613265333239356131373938 Jul 2 07:57:16.335000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.335000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2423 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630633337353165313238616230363736613265333239356131373938 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.336000 audit: BPF prog-id=69 op=LOAD Jul 2 07:57:16.336000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00031aec0 items=0 ppid=2423 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630633337353165313238616230363736613265333239356131373938 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit: BPF prog-id=70 op=LOAD Jul 2 07:57:16.337000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00031af08 items=0 ppid=2423 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630633337353165313238616230363736613265333239356131373938 Jul 2 07:57:16.337000 audit: BPF prog-id=70 op=UNLOAD Jul 2 07:57:16.337000 audit: BPF prog-id=69 op=UNLOAD Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { perfmon } for pid=2446 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit[2446]: AVC avc: denied { bpf } for pid=2446 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.337000 audit: BPF prog-id=71 op=LOAD Jul 2 07:57:16.337000 audit[2446]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00031b318 items=0 ppid=2423 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630633337353165313238616230363736613265333239356131373938 Jul 2 07:57:16.342152 systemd[1]: Started cri-containerd-53d692cb33134eec3f9a3ec8e4eca88374432636ef6f6f3d077b6889daf8869e.scope. Jul 2 07:57:16.350049 env[1729]: time="2024-07-02T07:57:16.349935022Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-21-43,Uid:ca1761a20d3c6a12cc1c2fd6448f01c5,Namespace:kube-system,Attempt:0,} returns sandbox id \"5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96\"" Jul 2 07:57:16.363767 env[1729]: time="2024-07-02T07:57:16.363695395Z" level=info msg="CreateContainer within sandbox \"5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 07:57:16.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit: BPF prog-id=72 op=LOAD Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2420 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533643639326362333331333465656333663961336563386534656361 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2420 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533643639326362333331333465656333663961336563386534656361 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.371000 audit: BPF prog-id=73 op=LOAD Jul 2 07:57:16.371000 audit[2452]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024fb0 items=0 ppid=2420 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533643639326362333331333465656333663961336563386534656361 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit: BPF prog-id=74 op=LOAD Jul 2 07:57:16.372000 audit[2452]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024ff8 items=0 ppid=2420 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533643639326362333331333465656333663961336563386534656361 Jul 2 07:57:16.372000 audit: BPF prog-id=74 op=UNLOAD Jul 2 07:57:16.372000 audit: BPF prog-id=73 op=UNLOAD Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.372000 audit: BPF prog-id=75 op=LOAD Jul 2 07:57:16.372000 audit[2452]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000025408 items=0 ppid=2420 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3533643639326362333331333465656333663961336563386534656361 Jul 2 07:57:16.400903 env[1729]: time="2024-07-02T07:57:16.400853638Z" level=info msg="CreateContainer within sandbox \"5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576\"" Jul 2 07:57:16.403636 env[1729]: time="2024-07-02T07:57:16.403490590Z" level=info msg="StartContainer for \"7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576\"" Jul 2 07:57:16.411173 kubelet[2340]: W0702 07:57:16.411109 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.21.43:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.411173 kubelet[2340]: E0702 07:57:16.411184 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.21.43:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.422962 env[1729]: time="2024-07-02T07:57:16.422911162Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-21-43,Uid:e104ec39f187f32c56b77afa779a9f29,Namespace:kube-system,Attempt:0,} returns sandbox id \"60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a\"" Jul 2 07:57:16.431730 env[1729]: time="2024-07-02T07:57:16.431665789Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-21-43,Uid:03ff386879016110fe820985b8c3f234,Namespace:kube-system,Attempt:0,} returns sandbox id \"53d692cb33134eec3f9a3ec8e4eca88374432636ef6f6f3d077b6889daf8869e\"" Jul 2 07:57:16.433395 env[1729]: time="2024-07-02T07:57:16.433349967Z" level=info msg="CreateContainer within sandbox \"60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 07:57:16.437233 env[1729]: time="2024-07-02T07:57:16.437189566Z" level=info msg="CreateContainer within sandbox \"53d692cb33134eec3f9a3ec8e4eca88374432636ef6f6f3d077b6889daf8869e\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 07:57:16.447657 systemd[1]: Started cri-containerd-7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576.scope. Jul 2 07:57:16.456016 kubelet[2340]: E0702 07:57:16.454447 2340 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.43:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-43?timeout=10s\": dial tcp 172.31.21.43:6443: connect: connection refused" interval="1.6s" Jul 2 07:57:16.459758 kubelet[2340]: W0702 07:57:16.459698 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.21.43:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-43&limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.459939 kubelet[2340]: E0702 07:57:16.459767 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.21.43:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-43&limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.472000 audit: BPF prog-id=76 op=LOAD Jul 2 07:57:16.473000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.473000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2380 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636339343139376539653065383132643566353438363462663563 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2380 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636339343139376539653065383132643566353438363462663563 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475455 env[1729]: time="2024-07-02T07:57:16.475203428Z" level=info msg="CreateContainer within sandbox \"60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e\"" Jul 2 07:57:16.474000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.474000 audit: BPF prog-id=77 op=LOAD Jul 2 07:57:16.474000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000397000 items=0 ppid=2380 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.476036 env[1729]: time="2024-07-02T07:57:16.475907629Z" level=info msg="StartContainer for \"5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e\"" Jul 2 07:57:16.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636339343139376539653065383132643566353438363462663563 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.475000 audit: BPF prog-id=78 op=LOAD Jul 2 07:57:16.475000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000397048 items=0 ppid=2380 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636339343139376539653065383132643566353438363462663563 Jul 2 07:57:16.476000 audit: BPF prog-id=78 op=UNLOAD Jul 2 07:57:16.476000 audit: BPF prog-id=77 op=UNLOAD Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { perfmon } for pid=2506 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit[2506]: AVC avc: denied { bpf } for pid=2506 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.476000 audit: BPF prog-id=79 op=LOAD Jul 2 07:57:16.476000 audit[2506]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000397458 items=0 ppid=2380 pid=2506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762636339343139376539653065383132643566353438363462663563 Jul 2 07:57:16.495262 env[1729]: time="2024-07-02T07:57:16.495209181Z" level=info msg="CreateContainer within sandbox \"53d692cb33134eec3f9a3ec8e4eca88374432636ef6f6f3d077b6889daf8869e\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a09ce532e69c1cdb053b1ecacc33210b134c2cadfb4835b15a31473059268946\"" Jul 2 07:57:16.496319 env[1729]: time="2024-07-02T07:57:16.496279336Z" level=info msg="StartContainer for \"a09ce532e69c1cdb053b1ecacc33210b134c2cadfb4835b15a31473059268946\"" Jul 2 07:57:16.532672 systemd[1]: Started cri-containerd-5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e.scope. Jul 2 07:57:16.560988 env[1729]: time="2024-07-02T07:57:16.560938348Z" level=info msg="StartContainer for \"7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576\" returns successfully" Jul 2 07:57:16.578228 kubelet[2340]: I0702 07:57:16.569717 2340 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-43" Jul 2 07:57:16.578228 kubelet[2340]: E0702 07:57:16.570085 2340 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.43:6443/api/v1/nodes\": dial tcp 172.31.21.43:6443: connect: connection refused" node="ip-172-31-21-43" Jul 2 07:57:16.579190 kubelet[2340]: W0702 07:57:16.579086 2340 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.21.43:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.579190 kubelet[2340]: E0702 07:57:16.579166 2340 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.21.43:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:16.585305 systemd[1]: Started cri-containerd-a09ce532e69c1cdb053b1ecacc33210b134c2cadfb4835b15a31473059268946.scope. Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.592000 audit: BPF prog-id=80 op=LOAD Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2423 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313562323861323937303963326434343366353331363530316265 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2423 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313562323861323937303963326434343366353331363530316265 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.595000 audit: BPF prog-id=81 op=LOAD Jul 2 07:57:16.595000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002213a0 items=0 ppid=2423 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313562323861323937303963326434343366353331363530316265 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.599000 audit: BPF prog-id=82 op=LOAD Jul 2 07:57:16.599000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002213e8 items=0 ppid=2423 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313562323861323937303963326434343366353331363530316265 Jul 2 07:57:16.600000 audit: BPF prog-id=82 op=UNLOAD Jul 2 07:57:16.601000 audit: BPF prog-id=81 op=UNLOAD Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.601000 audit: BPF prog-id=83 op=LOAD Jul 2 07:57:16.601000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002217f8 items=0 ppid=2423 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563313562323861323937303963326434343366353331363530316265 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.656000 audit: BPF prog-id=84 op=LOAD Jul 2 07:57:16.659000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.659000 audit[2559]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2420 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396365353332653639633163646230353362316563616363333332 Jul 2 07:57:16.659000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.659000 audit[2559]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2420 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396365353332653639633163646230353362316563616363333332 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.661000 audit: BPF prog-id=85 op=LOAD Jul 2 07:57:16.661000 audit[2559]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001cbee0 items=0 ppid=2420 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.661000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396365353332653639633163646230353362316563616363333332 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.664000 audit: BPF prog-id=86 op=LOAD Jul 2 07:57:16.664000 audit[2559]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001cbf28 items=0 ppid=2420 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396365353332653639633163646230353362316563616363333332 Jul 2 07:57:16.665000 audit: BPF prog-id=86 op=UNLOAD Jul 2 07:57:16.665000 audit: BPF prog-id=85 op=UNLOAD Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { perfmon } for pid=2559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit[2559]: AVC avc: denied { bpf } for pid=2559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:16.666000 audit: BPF prog-id=87 op=LOAD Jul 2 07:57:16.666000 audit[2559]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000400338 items=0 ppid=2420 pid=2559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:16.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130396365353332653639633163646230353362316563616363333332 Jul 2 07:57:16.689327 env[1729]: time="2024-07-02T07:57:16.689272300Z" level=info msg="StartContainer for \"5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e\" returns successfully" Jul 2 07:57:16.732500 env[1729]: time="2024-07-02T07:57:16.732448922Z" level=info msg="StartContainer for \"a09ce532e69c1cdb053b1ecacc33210b134c2cadfb4835b15a31473059268946\" returns successfully" Jul 2 07:57:17.045508 kubelet[2340]: E0702 07:57:17.045456 2340 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.21.43:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.21.43:6443: connect: connection refused Jul 2 07:57:17.914000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:17.916004 kernel: kauditd_printk_skb: 626 callbacks suppressed Jul 2 07:57:17.916109 kernel: audit: type=1400 audit(1719907037.914:535): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:17.914000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000796510 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:17.928560 kernel: audit: type=1300 audit(1719907037.914:535): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000796510 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:17.914000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:17.926000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:17.941292 kernel: audit: type=1327 audit(1719907037.914:535): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:17.941454 kernel: audit: type=1400 audit(1719907037.926:536): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:17.941490 kernel: audit: type=1300 audit(1719907037.926:536): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004162c0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:17.926000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0004162c0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:17.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:17.954164 kernel: audit: type=1327 audit(1719907037.926:536): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:18.180887 kubelet[2340]: I0702 07:57:18.180772 2340 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-43" Jul 2 07:57:19.513000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.514000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.524119 kernel: audit: type=1400 audit(1719907039.513:537): avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.524322 kernel: audit: type=1400 audit(1719907039.514:538): avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.531232 kernel: audit: type=1300 audit(1719907039.514:538): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004730090 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.514000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004730090 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.514000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.537643 kernel: audit: type=1327 audit(1719907039.514:538): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.513000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c003e57590 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.513000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.515000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.515000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c005843ec0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.532000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.532000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006d8a2e0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.532000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.533000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.533000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c004633d70 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.533000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.539000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:19.539000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00482e030 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:57:19.539000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:57:19.684145 kubelet[2340]: E0702 07:57:19.684106 2340 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-21-43\" not found" node="ip-172-31-21-43" Jul 2 07:57:19.710588 kubelet[2340]: I0702 07:57:19.710559 2340 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-21-43" Jul 2 07:57:19.794552 amazon-ssm-agent[1711]: 2024-07-02 07:57:19 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Jul 2 07:57:19.811732 kubelet[2340]: E0702 07:57:19.811692 2340 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-21-43\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:20.023447 kubelet[2340]: I0702 07:57:20.023398 2340 apiserver.go:52] "Watching apiserver" Jul 2 07:57:20.050790 kubelet[2340]: I0702 07:57:20.050657 2340 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 07:57:20.340596 kubelet[2340]: E0702 07:57:20.340402 2340 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-21-43\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:21.763000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=6380 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 07:57:21.763000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e6c9c0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:21.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:22.829478 systemd[1]: Reloading. Jul 2 07:57:22.944600 /usr/lib/systemd/system-generators/torcx-generator[2637]: time="2024-07-02T07:57:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:57:22.945644 /usr/lib/systemd/system-generators/torcx-generator[2637]: time="2024-07-02T07:57:22Z" level=info msg="torcx already run" Jul 2 07:57:23.085917 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:57:23.085942 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:57:23.108039 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:57:23.319931 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 2 07:57:23.320037 kernel: audit: type=1400 audit(1719907043.307:544): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.320091 kernel: audit: type=1400 audit(1719907043.307:545): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.327030 kernel: audit: type=1400 audit(1719907043.307:546): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.327127 kernel: audit: type=1400 audit(1719907043.307:547): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.336077 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 07:57:23.336224 kernel: audit: audit_lost=34 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 07:57:23.336253 kernel: audit: type=1400 audit(1719907043.307:548): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.336292 kernel: audit: backlog limit exceeded Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.337431 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 07:57:23.341841 kernel: audit: type=1400 audit(1719907043.307:549): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.307000 audit: BPF prog-id=88 op=LOAD Jul 2 07:57:23.307000 audit: BPF prog-id=84 op=UNLOAD Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.313000 audit: BPF prog-id=89 op=LOAD Jul 2 07:57:23.313000 audit: BPF prog-id=49 op=UNLOAD Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.314000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.317000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.317000 audit: BPF prog-id=90 op=LOAD Jul 2 07:57:23.318000 audit: BPF prog-id=68 op=UNLOAD Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.326000 audit: BPF prog-id=91 op=LOAD Jul 2 07:57:23.326000 audit: BPF prog-id=76 op=UNLOAD Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit: BPF prog-id=92 op=LOAD Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.328000 audit: BPF prog-id=93 op=LOAD Jul 2 07:57:23.328000 audit: BPF prog-id=50 op=UNLOAD Jul 2 07:57:23.328000 audit: BPF prog-id=51 op=UNLOAD Jul 2 07:57:23.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit: BPF prog-id=95 op=LOAD Jul 2 07:57:23.343000 audit: BPF prog-id=52 op=UNLOAD Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.343000 audit: BPF prog-id=96 op=LOAD Jul 2 07:57:23.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit: BPF prog-id=97 op=LOAD Jul 2 07:57:23.344000 audit: BPF prog-id=54 op=UNLOAD Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.345000 audit: BPF prog-id=98 op=LOAD Jul 2 07:57:23.345000 audit: BPF prog-id=72 op=UNLOAD Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit: BPF prog-id=99 op=LOAD Jul 2 07:57:23.350000 audit: BPF prog-id=55 op=UNLOAD Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit: BPF prog-id=100 op=LOAD Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.351000 audit: BPF prog-id=101 op=LOAD Jul 2 07:57:23.351000 audit: BPF prog-id=56 op=UNLOAD Jul 2 07:57:23.351000 audit: BPF prog-id=57 op=UNLOAD Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.353000 audit: BPF prog-id=102 op=LOAD Jul 2 07:57:23.353000 audit: BPF prog-id=58 op=UNLOAD Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.356000 audit: BPF prog-id=103 op=LOAD Jul 2 07:57:23.356000 audit: BPF prog-id=59 op=UNLOAD Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.358000 audit: BPF prog-id=104 op=LOAD Jul 2 07:57:23.358000 audit: BPF prog-id=60 op=UNLOAD Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit: BPF prog-id=105 op=LOAD Jul 2 07:57:23.359000 audit: BPF prog-id=80 op=UNLOAD Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit: BPF prog-id=106 op=LOAD Jul 2 07:57:23.360000 audit: BPF prog-id=61 op=UNLOAD Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit: BPF prog-id=107 op=LOAD Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:23.360000 audit: BPF prog-id=108 op=LOAD Jul 2 07:57:23.360000 audit: BPF prog-id=62 op=UNLOAD Jul 2 07:57:23.360000 audit: BPF prog-id=63 op=UNLOAD Jul 2 07:57:23.383350 kubelet[2340]: I0702 07:57:23.383309 2340 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:57:23.384461 systemd[1]: Stopping kubelet.service... Jul 2 07:57:23.403101 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:57:23.403428 systemd[1]: Stopped kubelet.service. Jul 2 07:57:23.403499 systemd[1]: kubelet.service: Consumed 1.271s CPU time. Jul 2 07:57:23.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:23.406234 systemd[1]: Starting kubelet.service... Jul 2 07:57:23.462000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:23.462000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e30be0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:23.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:23.464000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:23.464000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e30da0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:23.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:23.466000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:23.466000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e30f80 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:23.466000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:23.467000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:57:23.467000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e31260 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:57:23.467000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:57:24.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:24.883318 systemd[1]: Started kubelet.service. Jul 2 07:57:25.022723 kubelet[2694]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:57:25.023086 kubelet[2694]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:57:25.023131 kubelet[2694]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:57:25.035723 kubelet[2694]: I0702 07:57:25.035647 2694 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:57:25.057129 kubelet[2694]: I0702 07:57:25.057086 2694 server.go:467] "Kubelet version" kubeletVersion="v1.28.7" Jul 2 07:57:25.057320 kubelet[2694]: I0702 07:57:25.057307 2694 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:57:25.058200 kubelet[2694]: I0702 07:57:25.058178 2694 server.go:895] "Client rotation is on, will bootstrap in background" Jul 2 07:57:25.061896 kubelet[2694]: I0702 07:57:25.061867 2694 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 07:57:25.085707 kubelet[2694]: I0702 07:57:25.085660 2694 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:57:25.104555 kubelet[2694]: I0702 07:57:25.104501 2694 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:57:25.105219 kubelet[2694]: I0702 07:57:25.105201 2694 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:57:25.105680 kubelet[2694]: I0702 07:57:25.105635 2694 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:57:25.105830 kubelet[2694]: I0702 07:57:25.105820 2694 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:57:25.105886 kubelet[2694]: I0702 07:57:25.105880 2694 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:57:25.105973 kubelet[2694]: I0702 07:57:25.105966 2694 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:57:25.115811 kubelet[2694]: I0702 07:57:25.115765 2694 kubelet.go:393] "Attempting to sync node with API server" Jul 2 07:57:25.116000 kubelet[2694]: I0702 07:57:25.115990 2694 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:57:25.116170 kubelet[2694]: I0702 07:57:25.116160 2694 kubelet.go:309] "Adding apiserver pod source" Jul 2 07:57:25.116359 kubelet[2694]: I0702 07:57:25.116347 2694 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:57:25.130326 kubelet[2694]: I0702 07:57:25.130288 2694 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:57:25.131036 kubelet[2694]: I0702 07:57:25.131013 2694 server.go:1232] "Started kubelet" Jul 2 07:57:25.143000 audit[2694]: AVC avc: denied { mac_admin } for pid=2694 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:25.143000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:57:25.143000 audit[2694]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000be7800 a1=c000bf0e88 a2=c000be77d0 a3=25 items=0 ppid=1 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:25.143000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:57:25.146431 kubelet[2694]: I0702 07:57:25.146386 2694 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:57:25.146000 audit[2694]: AVC avc: denied { mac_admin } for pid=2694 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:25.146000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:57:25.146000 audit[2694]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bcde40 a1=c000bf0ea0 a2=c000be7890 a3=25 items=0 ppid=1 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:25.146000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:57:25.146963 kubelet[2694]: I0702 07:57:25.146946 2694 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:57:25.173293 kubelet[2694]: E0702 07:57:25.173267 2694 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Jul 2 07:57:25.173477 kubelet[2694]: E0702 07:57:25.173466 2694 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:57:25.175466 kubelet[2694]: I0702 07:57:25.175445 2694 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:57:25.176768 kubelet[2694]: I0702 07:57:25.176747 2694 server.go:462] "Adding debug handlers to kubelet server" Jul 2 07:57:25.180376 kubelet[2694]: I0702 07:57:25.180349 2694 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:57:25.184390 kubelet[2694]: I0702 07:57:25.184363 2694 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Jul 2 07:57:25.184804 kubelet[2694]: I0702 07:57:25.184780 2694 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:57:25.219768 kubelet[2694]: I0702 07:57:25.219729 2694 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 07:57:25.220991 kubelet[2694]: I0702 07:57:25.220574 2694 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:57:25.221229 kubelet[2694]: I0702 07:57:25.221208 2694 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 07:57:25.245686 kubelet[2694]: I0702 07:57:25.245658 2694 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:57:25.247630 kubelet[2694]: I0702 07:57:25.247607 2694 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:57:25.247800 kubelet[2694]: I0702 07:57:25.247791 2694 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:57:25.247899 kubelet[2694]: I0702 07:57:25.247891 2694 kubelet.go:2303] "Starting kubelet main sync loop" Jul 2 07:57:25.248163 kubelet[2694]: E0702 07:57:25.248150 2694 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:57:25.297813 kubelet[2694]: I0702 07:57:25.297789 2694 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-43" Jul 2 07:57:25.338625 kubelet[2694]: I0702 07:57:25.335905 2694 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-21-43" Jul 2 07:57:25.338625 kubelet[2694]: I0702 07:57:25.336014 2694 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-21-43" Jul 2 07:57:25.354113 kubelet[2694]: I0702 07:57:25.353906 2694 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:57:25.354113 kubelet[2694]: I0702 07:57:25.353936 2694 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:57:25.354113 kubelet[2694]: I0702 07:57:25.353957 2694 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:57:25.354388 kubelet[2694]: I0702 07:57:25.354325 2694 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 07:57:25.354452 kubelet[2694]: I0702 07:57:25.354395 2694 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 07:57:25.354452 kubelet[2694]: I0702 07:57:25.354409 2694 policy_none.go:49] "None policy: Start" Jul 2 07:57:25.356078 kubelet[2694]: I0702 07:57:25.356004 2694 memory_manager.go:169] "Starting memorymanager" policy="None" Jul 2 07:57:25.356198 kubelet[2694]: I0702 07:57:25.356089 2694 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:57:25.356352 kubelet[2694]: I0702 07:57:25.356338 2694 state_mem.go:75] "Updated machine memory state" Jul 2 07:57:25.361484 kubelet[2694]: E0702 07:57:25.361312 2694 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 07:57:25.383527 kubelet[2694]: I0702 07:57:25.383507 2694 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:57:25.383000 audit[2694]: AVC avc: denied { mac_admin } for pid=2694 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:25.383000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:57:25.383000 audit[2694]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011244b0 a1=c000ae17a0 a2=c001124480 a3=25 items=0 ppid=1 pid=2694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:25.383000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:57:25.384302 kubelet[2694]: I0702 07:57:25.384283 2694 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:57:25.388939 kubelet[2694]: I0702 07:57:25.388726 2694 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:57:25.562243 kubelet[2694]: I0702 07:57:25.562203 2694 topology_manager.go:215] "Topology Admit Handler" podUID="e104ec39f187f32c56b77afa779a9f29" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:25.562458 kubelet[2694]: I0702 07:57:25.562358 2694 topology_manager.go:215] "Topology Admit Handler" podUID="ca1761a20d3c6a12cc1c2fd6448f01c5" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-21-43" Jul 2 07:57:25.562458 kubelet[2694]: I0702 07:57:25.562421 2694 topology_manager.go:215] "Topology Admit Handler" podUID="03ff386879016110fe820985b8c3f234" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-21-43" Jul 2 07:57:25.576972 kubelet[2694]: E0702 07:57:25.576927 2694 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-21-43\" already exists" pod="kube-system/kube-scheduler-ip-172-31-21-43" Jul 2 07:57:25.633157 kubelet[2694]: I0702 07:57:25.633095 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-ca-certs\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:25.633366 kubelet[2694]: I0702 07:57:25.633202 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-kubeconfig\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:25.633366 kubelet[2694]: I0702 07:57:25.633238 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:25.633366 kubelet[2694]: I0702 07:57:25.633282 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:25.633366 kubelet[2694]: I0702 07:57:25.633315 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e104ec39f187f32c56b77afa779a9f29-k8s-certs\") pod \"kube-controller-manager-ip-172-31-21-43\" (UID: \"e104ec39f187f32c56b77afa779a9f29\") " pod="kube-system/kube-controller-manager-ip-172-31-21-43" Jul 2 07:57:25.633366 kubelet[2694]: I0702 07:57:25.633360 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ca1761a20d3c6a12cc1c2fd6448f01c5-kubeconfig\") pod \"kube-scheduler-ip-172-31-21-43\" (UID: \"ca1761a20d3c6a12cc1c2fd6448f01c5\") " pod="kube-system/kube-scheduler-ip-172-31-21-43" Jul 2 07:57:25.633762 kubelet[2694]: I0702 07:57:25.633391 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/03ff386879016110fe820985b8c3f234-ca-certs\") pod \"kube-apiserver-ip-172-31-21-43\" (UID: \"03ff386879016110fe820985b8c3f234\") " pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:25.633762 kubelet[2694]: I0702 07:57:25.633438 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/03ff386879016110fe820985b8c3f234-k8s-certs\") pod \"kube-apiserver-ip-172-31-21-43\" (UID: \"03ff386879016110fe820985b8c3f234\") " pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:25.633762 kubelet[2694]: I0702 07:57:25.633475 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/03ff386879016110fe820985b8c3f234-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-21-43\" (UID: \"03ff386879016110fe820985b8c3f234\") " pod="kube-system/kube-apiserver-ip-172-31-21-43" Jul 2 07:57:26.124102 kubelet[2694]: I0702 07:57:26.124052 2694 apiserver.go:52] "Watching apiserver" Jul 2 07:57:26.221181 kubelet[2694]: I0702 07:57:26.221132 2694 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 07:57:26.259179 kubelet[2694]: I0702 07:57:26.259140 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-21-43" podStartSLOduration=1.257464207 podCreationTimestamp="2024-07-02 07:57:25 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:57:26.238615286 +0000 UTC m=+1.324166219" watchObservedRunningTime="2024-07-02 07:57:26.257464207 +0000 UTC m=+1.343015132" Jul 2 07:57:26.293014 kubelet[2694]: I0702 07:57:26.292975 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-21-43" podStartSLOduration=4.292908053 podCreationTimestamp="2024-07-02 07:57:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:57:26.259261945 +0000 UTC m=+1.344812870" watchObservedRunningTime="2024-07-02 07:57:26.292908053 +0000 UTC m=+1.378458988" Jul 2 07:57:26.314726 kubelet[2694]: I0702 07:57:26.314676 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-21-43" podStartSLOduration=1.314609573 podCreationTimestamp="2024-07-02 07:57:25 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:57:26.293267848 +0000 UTC m=+1.378818781" watchObservedRunningTime="2024-07-02 07:57:26.314609573 +0000 UTC m=+1.400160505" Jul 2 07:57:27.298142 update_engine[1724]: I0702 07:57:27.297590 1724 update_attempter.cc:509] Updating boot flags... Jul 2 07:57:30.783181 sudo[2003]: pam_unix(sudo:session): session closed for user root Jul 2 07:57:30.781000 audit[2003]: USER_END pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:57:30.784565 kernel: kauditd_printk_skb: 282 callbacks suppressed Jul 2 07:57:30.784642 kernel: audit: type=1106 audit(1719907050.781:786): pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:57:30.783000 audit[2003]: CRED_DISP pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:57:30.792561 kernel: audit: type=1104 audit(1719907050.783:787): pid=2003 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:57:30.816066 sshd[2000]: pam_unix(sshd:session): session closed for user core Jul 2 07:57:30.816000 audit[2000]: USER_END pid=2000 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:57:30.820328 systemd[1]: sshd@6-172.31.21.43:22-139.178.89.65:47462.service: Deactivated successfully. Jul 2 07:57:30.821476 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 07:57:30.821683 systemd[1]: session-7.scope: Consumed 5.273s CPU time. Jul 2 07:57:30.823575 systemd-logind[1723]: Session 7 logged out. Waiting for processes to exit. Jul 2 07:57:30.816000 audit[2000]: CRED_DISP pid=2000 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:57:30.825275 systemd-logind[1723]: Removed session 7. Jul 2 07:57:30.828389 kernel: audit: type=1106 audit(1719907050.816:788): pid=2000 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:57:30.828521 kernel: audit: type=1104 audit(1719907050.816:789): pid=2000 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:57:30.828640 kernel: audit: type=1131 audit(1719907050.819:790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.43:22-139.178.89.65:47462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:30.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.43:22-139.178.89.65:47462 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:57:34.656471 kubelet[2694]: I0702 07:57:34.656442 2694 kuberuntime_manager.go:1528] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 07:57:34.658170 env[1729]: time="2024-07-02T07:57:34.658113416Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 07:57:34.659022 kubelet[2694]: I0702 07:57:34.659002 2694 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 07:57:35.309391 kubelet[2694]: I0702 07:57:35.309356 2694 topology_manager.go:215] "Topology Admit Handler" podUID="3e0ee9d2-552c-42ec-b71c-2b624eaf18a5" podNamespace="kube-system" podName="kube-proxy-sht5v" Jul 2 07:57:35.321932 systemd[1]: Created slice kubepods-besteffort-pod3e0ee9d2_552c_42ec_b71c_2b624eaf18a5.slice. Jul 2 07:57:35.411030 kubelet[2694]: I0702 07:57:35.410992 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3e0ee9d2-552c-42ec-b71c-2b624eaf18a5-lib-modules\") pod \"kube-proxy-sht5v\" (UID: \"3e0ee9d2-552c-42ec-b71c-2b624eaf18a5\") " pod="kube-system/kube-proxy-sht5v" Jul 2 07:57:35.411251 kubelet[2694]: I0702 07:57:35.411225 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3e0ee9d2-552c-42ec-b71c-2b624eaf18a5-xtables-lock\") pod \"kube-proxy-sht5v\" (UID: \"3e0ee9d2-552c-42ec-b71c-2b624eaf18a5\") " pod="kube-system/kube-proxy-sht5v" Jul 2 07:57:35.411350 kubelet[2694]: I0702 07:57:35.411269 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/3e0ee9d2-552c-42ec-b71c-2b624eaf18a5-kube-proxy\") pod \"kube-proxy-sht5v\" (UID: \"3e0ee9d2-552c-42ec-b71c-2b624eaf18a5\") " pod="kube-system/kube-proxy-sht5v" Jul 2 07:57:35.411350 kubelet[2694]: I0702 07:57:35.411298 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mgmcn\" (UniqueName: \"kubernetes.io/projected/3e0ee9d2-552c-42ec-b71c-2b624eaf18a5-kube-api-access-mgmcn\") pod \"kube-proxy-sht5v\" (UID: \"3e0ee9d2-552c-42ec-b71c-2b624eaf18a5\") " pod="kube-system/kube-proxy-sht5v" Jul 2 07:57:35.622605 kubelet[2694]: I0702 07:57:35.622458 2694 topology_manager.go:215] "Topology Admit Handler" podUID="7d9ebe9b-c099-4f23-be8a-2250d4ccec87" podNamespace="tigera-operator" podName="tigera-operator-76c4974c85-j9ztf" Jul 2 07:57:35.630207 systemd[1]: Created slice kubepods-besteffort-pod7d9ebe9b_c099_4f23_be8a_2250d4ccec87.slice. Jul 2 07:57:35.634660 kubelet[2694]: W0702 07:57:35.634632 2694 reflector.go:535] object-"tigera-operator"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:35.634913 kubelet[2694]: E0702 07:57:35.634897 2694 reflector.go:147] object-"tigera-operator"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:35.635065 kubelet[2694]: W0702 07:57:35.635052 2694 reflector.go:535] object-"tigera-operator"/"kubernetes-services-endpoint": failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:35.635156 kubelet[2694]: E0702 07:57:35.635146 2694 reflector.go:147] object-"tigera-operator"/"kubernetes-services-endpoint": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:35.638666 env[1729]: time="2024-07-02T07:57:35.638052603Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-sht5v,Uid:3e0ee9d2-552c-42ec-b71c-2b624eaf18a5,Namespace:kube-system,Attempt:0,}" Jul 2 07:57:35.673130 env[1729]: time="2024-07-02T07:57:35.673025020Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:35.673130 env[1729]: time="2024-07-02T07:57:35.673081751Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:35.673130 env[1729]: time="2024-07-02T07:57:35.673096346Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:35.674093 env[1729]: time="2024-07-02T07:57:35.674016429Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7a767a29c3d6920a12e2d802fb319ccf6094d0906297acac2cd364a3f43e388 pid=2872 runtime=io.containerd.runc.v2 Jul 2 07:57:35.713865 kubelet[2694]: I0702 07:57:35.713735 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7d9ebe9b-c099-4f23-be8a-2250d4ccec87-var-lib-calico\") pod \"tigera-operator-76c4974c85-j9ztf\" (UID: \"7d9ebe9b-c099-4f23-be8a-2250d4ccec87\") " pod="tigera-operator/tigera-operator-76c4974c85-j9ztf" Jul 2 07:57:35.713865 kubelet[2694]: I0702 07:57:35.713797 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nzk47\" (UniqueName: \"kubernetes.io/projected/7d9ebe9b-c099-4f23-be8a-2250d4ccec87-kube-api-access-nzk47\") pod \"tigera-operator-76c4974c85-j9ztf\" (UID: \"7d9ebe9b-c099-4f23-be8a-2250d4ccec87\") " pod="tigera-operator/tigera-operator-76c4974c85-j9ztf" Jul 2 07:57:35.718899 systemd[1]: Started cri-containerd-d7a767a29c3d6920a12e2d802fb319ccf6094d0906297acac2cd364a3f43e388.scope. Jul 2 07:57:35.742857 kernel: audit: type=1400 audit(1719907055.734:791): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.743013 kernel: audit: type=1400 audit(1719907055.734:792): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.747118 kernel: audit: type=1400 audit(1719907055.734:793): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.750862 kernel: audit: type=1400 audit(1719907055.734:794): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.755694 kernel: audit: type=1400 audit(1719907055.734:795): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit: BPF prog-id=109 op=LOAD Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2872 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613736376132396333643639323061313265326438303266623331 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2872 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613736376132396333643639323061313265326438303266623331 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.742000 audit: BPF prog-id=110 op=LOAD Jul 2 07:57:35.742000 audit[2884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002127e0 items=0 ppid=2872 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613736376132396333643639323061313265326438303266623331 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit: BPF prog-id=111 op=LOAD Jul 2 07:57:35.746000 audit[2884]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000212828 items=0 ppid=2872 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613736376132396333643639323061313265326438303266623331 Jul 2 07:57:35.746000 audit: BPF prog-id=111 op=UNLOAD Jul 2 07:57:35.746000 audit: BPF prog-id=110 op=UNLOAD Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { perfmon } for pid=2884 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit[2884]: AVC avc: denied { bpf } for pid=2884 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.746000 audit: BPF prog-id=112 op=LOAD Jul 2 07:57:35.746000 audit[2884]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000212c38 items=0 ppid=2872 pid=2884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613736376132396333643639323061313265326438303266623331 Jul 2 07:57:35.776404 env[1729]: time="2024-07-02T07:57:35.776357370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-sht5v,Uid:3e0ee9d2-552c-42ec-b71c-2b624eaf18a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"d7a767a29c3d6920a12e2d802fb319ccf6094d0906297acac2cd364a3f43e388\"" Jul 2 07:57:35.780514 env[1729]: time="2024-07-02T07:57:35.780430357Z" level=info msg="CreateContainer within sandbox \"d7a767a29c3d6920a12e2d802fb319ccf6094d0906297acac2cd364a3f43e388\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 07:57:35.837116 env[1729]: time="2024-07-02T07:57:35.837067390Z" level=info msg="CreateContainer within sandbox \"d7a767a29c3d6920a12e2d802fb319ccf6094d0906297acac2cd364a3f43e388\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"d82e234e386cab130883548fc575befca1f81dfafd63ff0cc8fe37e56abb7362\"" Jul 2 07:57:35.838034 env[1729]: time="2024-07-02T07:57:35.838000426Z" level=info msg="StartContainer for \"d82e234e386cab130883548fc575befca1f81dfafd63ff0cc8fe37e56abb7362\"" Jul 2 07:57:35.862035 systemd[1]: Started cri-containerd-d82e234e386cab130883548fc575befca1f81dfafd63ff0cc8fe37e56abb7362.scope. Jul 2 07:57:35.901380 kernel: kauditd_printk_skb: 52 callbacks suppressed Jul 2 07:57:35.901563 kernel: audit: type=1400 audit(1719907055.890:809): avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.901606 kernel: audit: type=1300 audit(1719907055.890:809): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c76b0 a2=3c a3=7fdf5044e9c8 items=0 ppid=2872 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c76b0 a2=3c a3=7fdf5044e9c8 items=0 ppid=2872 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438326532333465333836636162313330383833353438666335373562 Jul 2 07:57:35.907763 kernel: audit: type=1327 audit(1719907055.890:809): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438326532333465333836636162313330383833353438666335373562 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.915465 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.915652 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.923146 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.923253 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.932746 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.932862 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.937320 kernel: audit: type=1400 audit(1719907055.890:810): avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.890000 audit: BPF prog-id=113 op=LOAD Jul 2 07:57:35.890000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c79d8 a2=78 a3=c0003ba388 items=0 ppid=2872 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438326532333465333836636162313330383833353438666335373562 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.900000 audit: BPF prog-id=114 op=LOAD Jul 2 07:57:35.900000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c7770 a2=78 a3=c0003ba3d8 items=0 ppid=2872 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438326532333465333836636162313330383833353438666335373562 Jul 2 07:57:35.907000 audit: BPF prog-id=114 op=UNLOAD Jul 2 07:57:35.907000 audit: BPF prog-id=113 op=UNLOAD Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:35.907000 audit: BPF prog-id=115 op=LOAD Jul 2 07:57:35.907000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c7c30 a2=78 a3=c0003ba468 items=0 ppid=2872 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:35.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438326532333465333836636162313330383833353438666335373562 Jul 2 07:57:35.946152 env[1729]: time="2024-07-02T07:57:35.946093924Z" level=info msg="StartContainer for \"d82e234e386cab130883548fc575befca1f81dfafd63ff0cc8fe37e56abb7362\" returns successfully" Jul 2 07:57:36.470000 audit[2967]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2967 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.470000 audit[2967]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea298cc50 a2=0 a3=7ffea298cc3c items=0 ppid=2928 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.470000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:57:36.472000 audit[2968]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=2968 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.472000 audit[2968]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7b96f510 a2=0 a3=7fff7b96f4fc items=0 ppid=2928 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.472000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:57:36.474000 audit[2969]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=2969 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.474000 audit[2969]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe077bb8b0 a2=0 a3=7ffe077bb89c items=0 ppid=2928 pid=2969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.474000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:57:36.476000 audit[2970]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2970 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.476000 audit[2970]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc69a33250 a2=0 a3=7ffc69a3323c items=0 ppid=2928 pid=2970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.476000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:57:36.479000 audit[2971]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.479000 audit[2971]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd92272db0 a2=0 a3=7ffd92272d9c items=0 ppid=2928 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.479000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:57:36.481000 audit[2972]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.481000 audit[2972]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd365a2a20 a2=0 a3=7ffd365a2a0c items=0 ppid=2928 pid=2972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:57:36.538062 systemd[1]: run-containerd-runc-k8s.io-d7a767a29c3d6920a12e2d802fb319ccf6094d0906297acac2cd364a3f43e388-runc.AceFZ3.mount: Deactivated successfully. Jul 2 07:57:36.576000 audit[2973]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.576000 audit[2973]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffff4fdfb00 a2=0 a3=7ffff4fdfaec items=0 ppid=2928 pid=2973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.576000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:57:36.585000 audit[2975]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.585000 audit[2975]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdb67cda30 a2=0 a3=7ffdb67cda1c items=0 ppid=2928 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.585000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 07:57:36.591000 audit[2978]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.591000 audit[2978]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc25507ca0 a2=0 a3=7ffc25507c8c items=0 ppid=2928 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.591000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 07:57:36.594000 audit[2979]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.594000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd00f8a590 a2=0 a3=7ffd00f8a57c items=0 ppid=2928 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.594000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:57:36.600000 audit[2981]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2981 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.600000 audit[2981]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff4f78f440 a2=0 a3=7fff4f78f42c items=0 ppid=2928 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.600000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:57:36.602000 audit[2982]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.602000 audit[2982]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9e1837f0 a2=0 a3=7ffe9e1837dc items=0 ppid=2928 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:57:36.607000 audit[2984]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.607000 audit[2984]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff115b60c0 a2=0 a3=7fff115b60ac items=0 ppid=2928 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.607000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:57:36.612000 audit[2987]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.612000 audit[2987]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe632aac30 a2=0 a3=7ffe632aac1c items=0 ppid=2928 pid=2987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.612000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 07:57:36.615000 audit[2988]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.615000 audit[2988]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd15d12140 a2=0 a3=7ffd15d1212c items=0 ppid=2928 pid=2988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.615000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:57:36.620000 audit[2990]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.620000 audit[2990]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff1c9c3200 a2=0 a3=7fff1c9c31ec items=0 ppid=2928 pid=2990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.620000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:57:36.622000 audit[2991]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.622000 audit[2991]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffbc01e440 a2=0 a3=7fffbc01e42c items=0 ppid=2928 pid=2991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.622000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:57:36.627000 audit[2993]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.627000 audit[2993]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa6488770 a2=0 a3=7fffa648875c items=0 ppid=2928 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.627000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:57:36.634000 audit[2996]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.634000 audit[2996]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffca9a72440 a2=0 a3=7ffca9a7242c items=0 ppid=2928 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.634000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:57:36.639000 audit[2999]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.639000 audit[2999]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf20465e0 a2=0 a3=7ffcf20465cc items=0 ppid=2928 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.639000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:57:36.641000 audit[3000]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.641000 audit[3000]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc70e7ae70 a2=0 a3=7ffc70e7ae5c items=0 ppid=2928 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.641000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:57:36.646000 audit[3002]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.646000 audit[3002]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe056e79b0 a2=0 a3=7ffe056e799c items=0 ppid=2928 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:57:36.651000 audit[3005]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.651000 audit[3005]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe1677eb10 a2=0 a3=7ffe1677eafc items=0 ppid=2928 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.651000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:57:36.655000 audit[3006]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.655000 audit[3006]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffacd6b1d0 a2=0 a3=7fffacd6b1bc items=0 ppid=2928 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:57:36.659000 audit[3008]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:57:36.659000 audit[3008]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc54e98350 a2=0 a3=7ffc54e9833c items=0 ppid=2928 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.659000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:57:36.706000 audit[3015]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3015 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:36.706000 audit[3015]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc2289ba30 a2=0 a3=7ffc2289ba1c items=0 ppid=2928 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.706000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:36.715000 audit[3015]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3015 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:36.715000 audit[3015]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffc2289ba30 a2=0 a3=7ffc2289ba1c items=0 ppid=2928 pid=3015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.715000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:36.728000 audit[3021]: NETFILTER_CFG table=filter:65 family=2 entries=14 op=nft_register_rule pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:36.728000 audit[3021]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffcc745cee0 a2=0 a3=7ffcc745cecc items=0 ppid=2928 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.728000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:36.739000 audit[3021]: NETFILTER_CFG table=nat:66 family=2 entries=12 op=nft_register_rule pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:36.739000 audit[3021]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcc745cee0 a2=0 a3=0 items=0 ppid=2928 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.739000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:36.749000 audit[3022]: NETFILTER_CFG table=filter:67 family=10 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.749000 audit[3022]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff96816cf0 a2=0 a3=7fff96816cdc items=0 ppid=2928 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:57:36.754000 audit[3024]: NETFILTER_CFG table=filter:68 family=10 entries=2 op=nft_register_chain pid=3024 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.754000 audit[3024]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffb43cf8a0 a2=0 a3=7fffb43cf88c items=0 ppid=2928 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.754000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 07:57:36.762000 audit[3027]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=3027 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.762000 audit[3027]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd8f92ccf0 a2=0 a3=7ffd8f92ccdc items=0 ppid=2928 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 07:57:36.763000 audit[3028]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3028 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.763000 audit[3028]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8e8e7c50 a2=0 a3=7ffd8e8e7c3c items=0 ppid=2928 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.763000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:57:36.767000 audit[3030]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3030 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.767000 audit[3030]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd75a1a90 a2=0 a3=7fffd75a1a7c items=0 ppid=2928 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:57:36.770000 audit[3031]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=3031 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.770000 audit[3031]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe44878150 a2=0 a3=7ffe4487813c items=0 ppid=2928 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.770000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:57:36.775000 audit[3033]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=3033 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.775000 audit[3033]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc592d6be0 a2=0 a3=7ffc592d6bcc items=0 ppid=2928 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.775000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 07:57:36.782000 audit[3036]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=3036 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.782000 audit[3036]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe75c6b760 a2=0 a3=7ffe75c6b74c items=0 ppid=2928 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.782000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:57:36.785000 audit[3037]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3037 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.785000 audit[3037]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe78b0c3f0 a2=0 a3=7ffe78b0c3dc items=0 ppid=2928 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.785000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:57:36.790000 audit[3039]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3039 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.790000 audit[3039]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd20f44420 a2=0 a3=7ffd20f4440c items=0 ppid=2928 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.790000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:57:36.792000 audit[3040]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.792000 audit[3040]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffffd32d1b0 a2=0 a3=7ffffd32d19c items=0 ppid=2928 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.792000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:57:36.795000 audit[3042]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.795000 audit[3042]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe002d8900 a2=0 a3=7ffe002d88ec items=0 ppid=2928 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.795000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:57:36.801000 audit[3045]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=3045 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.801000 audit[3045]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe0feec360 a2=0 a3=7ffe0feec34c items=0 ppid=2928 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.801000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:57:36.806000 audit[3048]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=3048 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.806000 audit[3048]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe7652ec40 a2=0 a3=7ffe7652ec2c items=0 ppid=2928 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 07:57:36.808000 audit[3049]: NETFILTER_CFG table=nat:81 family=10 entries=1 op=nft_register_chain pid=3049 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.808000 audit[3049]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc6c1420d0 a2=0 a3=7ffc6c1420bc items=0 ppid=2928 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.808000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:57:36.812000 audit[3051]: NETFILTER_CFG table=nat:82 family=10 entries=2 op=nft_register_chain pid=3051 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.812000 audit[3051]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe59751f10 a2=0 a3=7ffe59751efc items=0 ppid=2928 pid=3051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:57:36.817000 audit[3054]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.817000 audit[3054]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff5ad5f230 a2=0 a3=7fff5ad5f21c items=0 ppid=2928 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.817000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:57:36.818000 audit[3055]: NETFILTER_CFG table=nat:84 family=10 entries=1 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.818000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff0848120 a2=0 a3=7ffff084810c items=0 ppid=2928 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.818000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:57:36.822000 audit[3057]: NETFILTER_CFG table=nat:85 family=10 entries=2 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.822000 audit[3057]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff352d5070 a2=0 a3=7fff352d505c items=0 ppid=2928 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.822000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:57:36.824000 audit[3058]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.824000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd87ac0ad0 a2=0 a3=7ffd87ac0abc items=0 ppid=2928 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:57:36.828000 audit[3060]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_rule pid=3060 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.828000 audit[3060]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffceb3a180 a2=0 a3=7fffceb3a16c items=0 ppid=2928 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:57:36.835000 audit[3063]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3063 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:57:36.835000 audit[3063]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff4424cfb0 a2=0 a3=7fff4424cf9c items=0 ppid=2928 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:57:36.837827 env[1729]: time="2024-07-02T07:57:36.837682354Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-j9ztf,Uid:7d9ebe9b-c099-4f23-be8a-2250d4ccec87,Namespace:tigera-operator,Attempt:0,}" Jul 2 07:57:36.847000 audit[3065]: NETFILTER_CFG table=filter:89 family=10 entries=3 op=nft_register_rule pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:57:36.847000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7fffbaebfbd0 a2=0 a3=7fffbaebfbbc items=0 ppid=2928 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.847000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:36.848000 audit[3065]: NETFILTER_CFG table=nat:90 family=10 entries=7 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:57:36.848000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffbaebfbd0 a2=0 a3=7fffbaebfbbc items=0 ppid=2928 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.848000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:36.881746 env[1729]: time="2024-07-02T07:57:36.881646334Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:36.881906 env[1729]: time="2024-07-02T07:57:36.881756211Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:36.881906 env[1729]: time="2024-07-02T07:57:36.881786139Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:36.882085 env[1729]: time="2024-07-02T07:57:36.881948499Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237 pid=3073 runtime=io.containerd.runc.v2 Jul 2 07:57:36.911649 systemd[1]: Started cri-containerd-c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237.scope. Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.929000 audit: BPF prog-id=116 op=LOAD Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=3073 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337666232643330353930653532613063643537373264363536633161 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=3073 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337666232643330353930653532613063643537373264363536633161 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit: BPF prog-id=117 op=LOAD Jul 2 07:57:36.930000 audit[3083]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0002e7e80 items=0 ppid=3073 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337666232643330353930653532613063643537373264363536633161 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit: BPF prog-id=118 op=LOAD Jul 2 07:57:36.930000 audit[3083]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0002e7ec8 items=0 ppid=3073 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337666232643330353930653532613063643537373264363536633161 Jul 2 07:57:36.930000 audit: BPF prog-id=118 op=UNLOAD Jul 2 07:57:36.930000 audit: BPF prog-id=117 op=UNLOAD Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { perfmon } for pid=3083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit[3083]: AVC avc: denied { bpf } for pid=3083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:36.930000 audit: BPF prog-id=119 op=LOAD Jul 2 07:57:36.930000 audit[3083]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003dc2d8 items=0 ppid=3073 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337666232643330353930653532613063643537373264363536633161 Jul 2 07:57:36.991984 env[1729]: time="2024-07-02T07:57:36.991141799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-j9ztf,Uid:7d9ebe9b-c099-4f23-be8a-2250d4ccec87,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237\"" Jul 2 07:57:37.003842 env[1729]: time="2024-07-02T07:57:37.003725632Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 07:57:37.535236 systemd[1]: run-containerd-runc-k8s.io-c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237-runc.peb8xa.mount: Deactivated successfully. Jul 2 07:57:38.644969 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount790511255.mount: Deactivated successfully. Jul 2 07:57:39.753651 env[1729]: time="2024-07-02T07:57:39.753598684Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:39.762060 env[1729]: time="2024-07-02T07:57:39.762008632Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:39.766599 env[1729]: time="2024-07-02T07:57:39.766552301Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:39.769244 env[1729]: time="2024-07-02T07:57:39.769196041Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:39.769966 env[1729]: time="2024-07-02T07:57:39.769926219Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d\"" Jul 2 07:57:39.784357 env[1729]: time="2024-07-02T07:57:39.784173533Z" level=info msg="CreateContainer within sandbox \"c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 07:57:39.814613 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3936771919.mount: Deactivated successfully. Jul 2 07:57:39.826091 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount17867910.mount: Deactivated successfully. Jul 2 07:57:39.833914 env[1729]: time="2024-07-02T07:57:39.833855564Z" level=info msg="CreateContainer within sandbox \"c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279\"" Jul 2 07:57:39.835973 env[1729]: time="2024-07-02T07:57:39.834526952Z" level=info msg="StartContainer for \"bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279\"" Jul 2 07:57:39.859033 systemd[1]: Started cri-containerd-bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279.scope. Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit: BPF prog-id=120 op=LOAD Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3073 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264343939323763383339313461316362623364336138373965303730 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3073 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264343939323763383339313461316362623364336138373965303730 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit: BPF prog-id=121 op=LOAD Jul 2 07:57:39.881000 audit[3115]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d4c40 items=0 ppid=3073 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264343939323763383339313461316362623364336138373965303730 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.881000 audit: BPF prog-id=122 op=LOAD Jul 2 07:57:39.881000 audit[3115]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d4c88 items=0 ppid=3073 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264343939323763383339313461316362623364336138373965303730 Jul 2 07:57:39.882000 audit: BPF prog-id=122 op=UNLOAD Jul 2 07:57:39.882000 audit: BPF prog-id=121 op=UNLOAD Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { perfmon } for pid=3115 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit[3115]: AVC avc: denied { bpf } for pid=3115 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:39.882000 audit: BPF prog-id=123 op=LOAD Jul 2 07:57:39.882000 audit[3115]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d5098 items=0 ppid=3073 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264343939323763383339313461316362623364336138373965303730 Jul 2 07:57:39.905088 env[1729]: time="2024-07-02T07:57:39.905035775Z" level=info msg="StartContainer for \"bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279\" returns successfully" Jul 2 07:57:40.356219 kubelet[2694]: I0702 07:57:40.349931 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-sht5v" podStartSLOduration=5.348813881 podCreationTimestamp="2024-07-02 07:57:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:57:36.341833478 +0000 UTC m=+11.427384412" watchObservedRunningTime="2024-07-02 07:57:40.348813881 +0000 UTC m=+15.434364815" Jul 2 07:57:42.902868 kernel: kauditd_printk_skb: 306 callbacks suppressed Jul 2 07:57:42.903180 kernel: audit: type=1325 audit(1719907062.892:904): table=filter:91 family=2 entries=14 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.903242 kernel: audit: type=1300 audit(1719907062.892:904): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7fff8c6de600 a2=0 a3=7fff8c6de5ec items=0 ppid=2928 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.892000 audit[3148]: NETFILTER_CFG table=filter:91 family=2 entries=14 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.892000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7fff8c6de600 a2=0 a3=7fff8c6de5ec items=0 ppid=2928 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.892000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.906564 kernel: audit: type=1327 audit(1719907062.892:904): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.892000 audit[3148]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.917146 kernel: audit: type=1325 audit(1719907062.892:905): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3148 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.917285 kernel: audit: type=1300 audit(1719907062.892:905): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff8c6de600 a2=0 a3=0 items=0 ppid=2928 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.892000 audit[3148]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff8c6de600 a2=0 a3=0 items=0 ppid=2928 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.919803 kernel: audit: type=1327 audit(1719907062.892:905): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.892000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.913000 audit[3150]: NETFILTER_CFG table=filter:93 family=2 entries=15 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.923615 kernel: audit: type=1325 audit(1719907062.913:906): table=filter:93 family=2 entries=15 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.913000 audit[3150]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd94e4bbe0 a2=0 a3=7ffd94e4bbcc items=0 ppid=2928 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.930568 kernel: audit: type=1300 audit(1719907062.913:906): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd94e4bbe0 a2=0 a3=7ffd94e4bbcc items=0 ppid=2928 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.930691 kernel: audit: type=1327 audit(1719907062.913:906): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.920000 audit[3150]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:42.920000 audit[3150]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd94e4bbe0 a2=0 a3=0 items=0 ppid=2928 pid=3150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:42.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:42.936557 kernel: audit: type=1325 audit(1719907062.920:907): table=nat:94 family=2 entries=12 op=nft_register_rule pid=3150 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:43.052885 kubelet[2694]: I0702 07:57:43.052748 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4974c85-j9ztf" podStartSLOduration=5.283149126 podCreationTimestamp="2024-07-02 07:57:35 +0000 UTC" firstStartedPulling="2024-07-02 07:57:37.000785168 +0000 UTC m=+12.086336091" lastFinishedPulling="2024-07-02 07:57:39.770338353 +0000 UTC m=+14.855889278" observedRunningTime="2024-07-02 07:57:40.34875887 +0000 UTC m=+15.434309802" watchObservedRunningTime="2024-07-02 07:57:43.052702313 +0000 UTC m=+18.138253246" Jul 2 07:57:43.053601 kubelet[2694]: I0702 07:57:43.052981 2694 topology_manager.go:215] "Topology Admit Handler" podUID="8473a009-dc73-4c8b-8130-e685ebed00a1" podNamespace="calico-system" podName="calico-typha-6c45b78f6d-d6qpc" Jul 2 07:57:43.059798 systemd[1]: Created slice kubepods-besteffort-pod8473a009_dc73_4c8b_8130_e685ebed00a1.slice. Jul 2 07:57:43.176024 kubelet[2694]: I0702 07:57:43.175910 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/8473a009-dc73-4c8b-8130-e685ebed00a1-typha-certs\") pod \"calico-typha-6c45b78f6d-d6qpc\" (UID: \"8473a009-dc73-4c8b-8130-e685ebed00a1\") " pod="calico-system/calico-typha-6c45b78f6d-d6qpc" Jul 2 07:57:43.176024 kubelet[2694]: I0702 07:57:43.175967 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8473a009-dc73-4c8b-8130-e685ebed00a1-tigera-ca-bundle\") pod \"calico-typha-6c45b78f6d-d6qpc\" (UID: \"8473a009-dc73-4c8b-8130-e685ebed00a1\") " pod="calico-system/calico-typha-6c45b78f6d-d6qpc" Jul 2 07:57:43.176024 kubelet[2694]: I0702 07:57:43.176001 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vs8td\" (UniqueName: \"kubernetes.io/projected/8473a009-dc73-4c8b-8130-e685ebed00a1-kube-api-access-vs8td\") pod \"calico-typha-6c45b78f6d-d6qpc\" (UID: \"8473a009-dc73-4c8b-8130-e685ebed00a1\") " pod="calico-system/calico-typha-6c45b78f6d-d6qpc" Jul 2 07:57:43.176399 kubelet[2694]: I0702 07:57:43.176063 2694 topology_manager.go:215] "Topology Admit Handler" podUID="7b37db3f-e20f-42d0-b723-a1ea7ee1e751" podNamespace="calico-system" podName="calico-node-qhsj4" Jul 2 07:57:43.185304 systemd[1]: Created slice kubepods-besteffort-pod7b37db3f_e20f_42d0_b723_a1ea7ee1e751.slice. Jul 2 07:57:43.191989 kubelet[2694]: W0702 07:57:43.191628 2694 reflector.go:535] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:43.192322 kubelet[2694]: E0702 07:57:43.192306 2694 reflector.go:147] object-"calico-system"/"node-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:43.192734 kubelet[2694]: W0702 07:57:43.192715 2694 reflector.go:535] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:43.192878 kubelet[2694]: E0702 07:57:43.192867 2694 reflector.go:147] object-"calico-system"/"cni-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:ip-172-31-21-43" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'ip-172-31-21-43' and this object Jul 2 07:57:43.277967 kubelet[2694]: I0702 07:57:43.277887 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-node-certs\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.279950 kubelet[2694]: I0702 07:57:43.279825 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-var-run-calico\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.280197 kubelet[2694]: I0702 07:57:43.280182 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-flexvol-driver-host\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.280522 kubelet[2694]: I0702 07:57:43.280506 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jcgp2\" (UniqueName: \"kubernetes.io/projected/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-kube-api-access-jcgp2\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.280857 kubelet[2694]: I0702 07:57:43.280841 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-cni-net-dir\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.282051 kubelet[2694]: I0702 07:57:43.282034 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-lib-modules\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.282378 kubelet[2694]: I0702 07:57:43.282363 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-var-lib-calico\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.282659 kubelet[2694]: I0702 07:57:43.282647 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-cni-log-dir\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.282898 kubelet[2694]: I0702 07:57:43.282887 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-tigera-ca-bundle\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.283122 kubelet[2694]: I0702 07:57:43.283109 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-cni-bin-dir\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.283300 kubelet[2694]: I0702 07:57:43.283290 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-policysync\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.283474 kubelet[2694]: I0702 07:57:43.283454 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-xtables-lock\") pod \"calico-node-qhsj4\" (UID: \"7b37db3f-e20f-42d0-b723-a1ea7ee1e751\") " pod="calico-system/calico-node-qhsj4" Jul 2 07:57:43.307633 kubelet[2694]: I0702 07:57:43.307592 2694 topology_manager.go:215] "Topology Admit Handler" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" podNamespace="calico-system" podName="csi-node-driver-sq7vd" Jul 2 07:57:43.307960 kubelet[2694]: E0702 07:57:43.307935 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:43.367609 env[1729]: time="2024-07-02T07:57:43.367558350Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6c45b78f6d-d6qpc,Uid:8473a009-dc73-4c8b-8130-e685ebed00a1,Namespace:calico-system,Attempt:0,}" Jul 2 07:57:43.385090 kubelet[2694]: I0702 07:57:43.385051 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/5f9d1ef0-c803-4c2a-a4d6-d10fc80db794-kubelet-dir\") pod \"csi-node-driver-sq7vd\" (UID: \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\") " pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:43.385274 kubelet[2694]: I0702 07:57:43.385149 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sw56b\" (UniqueName: \"kubernetes.io/projected/5f9d1ef0-c803-4c2a-a4d6-d10fc80db794-kube-api-access-sw56b\") pod \"csi-node-driver-sq7vd\" (UID: \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\") " pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:43.385274 kubelet[2694]: I0702 07:57:43.385180 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/5f9d1ef0-c803-4c2a-a4d6-d10fc80db794-varrun\") pod \"csi-node-driver-sq7vd\" (UID: \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\") " pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:43.385274 kubelet[2694]: I0702 07:57:43.385229 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/5f9d1ef0-c803-4c2a-a4d6-d10fc80db794-socket-dir\") pod \"csi-node-driver-sq7vd\" (UID: \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\") " pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:43.385418 kubelet[2694]: I0702 07:57:43.385305 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/5f9d1ef0-c803-4c2a-a4d6-d10fc80db794-registration-dir\") pod \"csi-node-driver-sq7vd\" (UID: \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\") " pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:43.400548 kubelet[2694]: E0702 07:57:43.400502 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.400712 kubelet[2694]: W0702 07:57:43.400556 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.400712 kubelet[2694]: E0702 07:57:43.400606 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.400895 kubelet[2694]: E0702 07:57:43.400878 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.400978 kubelet[2694]: W0702 07:57:43.400896 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.401045 kubelet[2694]: E0702 07:57:43.400992 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.401148 kubelet[2694]: E0702 07:57:43.401133 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.401221 kubelet[2694]: W0702 07:57:43.401148 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.401265 kubelet[2694]: E0702 07:57:43.401235 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.401426 kubelet[2694]: E0702 07:57:43.401402 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.401426 kubelet[2694]: W0702 07:57:43.401414 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.401580 kubelet[2694]: E0702 07:57:43.401505 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.401669 kubelet[2694]: E0702 07:57:43.401652 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.401743 kubelet[2694]: W0702 07:57:43.401670 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.401807 kubelet[2694]: E0702 07:57:43.401760 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.402032 kubelet[2694]: E0702 07:57:43.401952 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.402032 kubelet[2694]: W0702 07:57:43.401966 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.402181 kubelet[2694]: E0702 07:57:43.402065 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.402231 kubelet[2694]: E0702 07:57:43.402200 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.402231 kubelet[2694]: W0702 07:57:43.402209 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.402231 kubelet[2694]: E0702 07:57:43.402229 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.402653 kubelet[2694]: E0702 07:57:43.402527 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.403470 kubelet[2694]: W0702 07:57:43.402631 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.403581 kubelet[2694]: E0702 07:57:43.403481 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.403762 kubelet[2694]: E0702 07:57:43.403742 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.403762 kubelet[2694]: W0702 07:57:43.403759 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.403909 kubelet[2694]: E0702 07:57:43.403779 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.404014 kubelet[2694]: E0702 07:57:43.403999 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.404096 kubelet[2694]: W0702 07:57:43.404014 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.406238 kubelet[2694]: E0702 07:57:43.406207 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.406452 kubelet[2694]: E0702 07:57:43.406422 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.406452 kubelet[2694]: W0702 07:57:43.406438 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.406854 kubelet[2694]: E0702 07:57:43.406684 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.407022 kubelet[2694]: E0702 07:57:43.406998 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.407022 kubelet[2694]: W0702 07:57:43.407014 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.407160 kubelet[2694]: E0702 07:57:43.407145 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.407315 kubelet[2694]: E0702 07:57:43.407286 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.407315 kubelet[2694]: W0702 07:57:43.407300 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.407435 kubelet[2694]: E0702 07:57:43.407321 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.407615 kubelet[2694]: E0702 07:57:43.407585 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.407615 kubelet[2694]: W0702 07:57:43.407600 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.407749 kubelet[2694]: E0702 07:57:43.407622 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.407889 kubelet[2694]: E0702 07:57:43.407862 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.407889 kubelet[2694]: W0702 07:57:43.407878 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.407986 kubelet[2694]: E0702 07:57:43.407898 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.408154 kubelet[2694]: E0702 07:57:43.408134 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.408154 kubelet[2694]: W0702 07:57:43.408150 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.408283 kubelet[2694]: E0702 07:57:43.408165 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.408439 kubelet[2694]: E0702 07:57:43.408400 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.408439 kubelet[2694]: W0702 07:57:43.408411 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.408439 kubelet[2694]: E0702 07:57:43.408427 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.413823 env[1729]: time="2024-07-02T07:57:43.413726087Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:43.413975 env[1729]: time="2024-07-02T07:57:43.413828226Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:43.413975 env[1729]: time="2024-07-02T07:57:43.413858497Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:43.414102 env[1729]: time="2024-07-02T07:57:43.414066678Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dea8fca05bdca43e68aa427e8893d0adcdd4ebf772cd0ce514de97ee8300e6e3 pid=3178 runtime=io.containerd.runc.v2 Jul 2 07:57:43.440786 systemd[1]: Started cri-containerd-dea8fca05bdca43e68aa427e8893d0adcdd4ebf772cd0ce514de97ee8300e6e3.scope. Jul 2 07:57:43.458121 kubelet[2694]: E0702 07:57:43.450150 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.458121 kubelet[2694]: W0702 07:57:43.450171 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.458121 kubelet[2694]: E0702 07:57:43.450197 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.494879 kubelet[2694]: E0702 07:57:43.494480 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.494879 kubelet[2694]: W0702 07:57:43.494507 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.494879 kubelet[2694]: E0702 07:57:43.494556 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.495463 kubelet[2694]: E0702 07:57:43.495261 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.495463 kubelet[2694]: W0702 07:57:43.495272 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.495463 kubelet[2694]: E0702 07:57:43.495384 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.495714 kubelet[2694]: E0702 07:57:43.495620 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.495714 kubelet[2694]: W0702 07:57:43.495632 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.495714 kubelet[2694]: E0702 07:57:43.495655 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.496205 kubelet[2694]: E0702 07:57:43.496186 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.496205 kubelet[2694]: W0702 07:57:43.496205 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.496382 kubelet[2694]: E0702 07:57:43.496228 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.496438 kubelet[2694]: E0702 07:57:43.496426 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.496438 kubelet[2694]: W0702 07:57:43.496435 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.496681 kubelet[2694]: E0702 07:57:43.496452 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.496870 kubelet[2694]: E0702 07:57:43.496832 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.496870 kubelet[2694]: W0702 07:57:43.496843 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.496870 kubelet[2694]: E0702 07:57:43.496858 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.498035 kubelet[2694]: E0702 07:57:43.497071 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.498035 kubelet[2694]: W0702 07:57:43.497082 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.498035 kubelet[2694]: E0702 07:57:43.497103 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.498035 kubelet[2694]: E0702 07:57:43.497391 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.498035 kubelet[2694]: W0702 07:57:43.497402 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.498035 kubelet[2694]: E0702 07:57:43.497524 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.498035 kubelet[2694]: E0702 07:57:43.497777 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.498035 kubelet[2694]: W0702 07:57:43.497788 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.498035 kubelet[2694]: E0702 07:57:43.497807 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.498843 kubelet[2694]: E0702 07:57:43.498075 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.498843 kubelet[2694]: W0702 07:57:43.498084 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.498843 kubelet[2694]: E0702 07:57:43.498180 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.498843 kubelet[2694]: E0702 07:57:43.498597 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.498843 kubelet[2694]: W0702 07:57:43.498608 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.498843 kubelet[2694]: E0702 07:57:43.498757 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.499318 kubelet[2694]: E0702 07:57:43.499167 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.499318 kubelet[2694]: W0702 07:57:43.499259 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.499864 kubelet[2694]: E0702 07:57:43.499422 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.499864 kubelet[2694]: E0702 07:57:43.499709 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.499864 kubelet[2694]: W0702 07:57:43.499721 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.500007 kubelet[2694]: E0702 07:57:43.499868 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.501004 kubelet[2694]: E0702 07:57:43.500947 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.501004 kubelet[2694]: W0702 07:57:43.500962 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.501181 kubelet[2694]: E0702 07:57:43.501067 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.501634 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.504798 kubelet[2694]: W0702 07:57:43.501649 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.501777 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.503342 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.504798 kubelet[2694]: W0702 07:57:43.503357 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.503478 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.503642 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.504798 kubelet[2694]: W0702 07:57:43.503651 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.503744 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.504798 kubelet[2694]: E0702 07:57:43.503940 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.505340 kubelet[2694]: W0702 07:57:43.503949 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.505340 kubelet[2694]: E0702 07:57:43.504057 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.505340 kubelet[2694]: E0702 07:57:43.504333 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.505340 kubelet[2694]: W0702 07:57:43.504353 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.505340 kubelet[2694]: E0702 07:57:43.504449 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.505340 kubelet[2694]: E0702 07:57:43.504629 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.505340 kubelet[2694]: W0702 07:57:43.504638 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.505340 kubelet[2694]: E0702 07:57:43.504657 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.509986 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.512335 kubelet[2694]: W0702 07:57:43.510015 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.510150 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.510378 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.512335 kubelet[2694]: W0702 07:57:43.510389 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.510545 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.510875 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.512335 kubelet[2694]: W0702 07:57:43.510886 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.510986 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.512335 kubelet[2694]: E0702 07:57:43.511138 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.513072 kubelet[2694]: W0702 07:57:43.511234 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.513072 kubelet[2694]: E0702 07:57:43.511412 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.513072 kubelet[2694]: E0702 07:57:43.511593 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.513072 kubelet[2694]: W0702 07:57:43.511602 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.513072 kubelet[2694]: E0702 07:57:43.511630 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.513072 kubelet[2694]: E0702 07:57:43.512025 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.513072 kubelet[2694]: W0702 07:57:43.512036 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.513072 kubelet[2694]: E0702 07:57:43.512066 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.518000 audit: BPF prog-id=124 op=LOAD Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3178 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:43.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613866636130356264636134336536386161343237653838393364 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3178 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:43.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613866636130356264636134336536386161343237653838393364 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit: BPF prog-id=125 op=LOAD Jul 2 07:57:43.519000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000257ce0 items=0 ppid=3178 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:43.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613866636130356264636134336536386161343237653838393364 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.519000 audit: BPF prog-id=126 op=LOAD Jul 2 07:57:43.519000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000257d28 items=0 ppid=3178 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:43.519000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613866636130356264636134336536386161343237653838393364 Jul 2 07:57:43.520000 audit: BPF prog-id=126 op=UNLOAD Jul 2 07:57:43.520000 audit: BPF prog-id=125 op=UNLOAD Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:43.520000 audit: BPF prog-id=127 op=LOAD Jul 2 07:57:43.520000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003da138 items=0 ppid=3178 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:43.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613866636130356264636134336536386161343237653838393364 Jul 2 07:57:43.541392 kubelet[2694]: E0702 07:57:43.541367 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.541767 kubelet[2694]: W0702 07:57:43.541748 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.541891 kubelet[2694]: E0702 07:57:43.541879 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.582770 env[1729]: time="2024-07-02T07:57:43.582719156Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6c45b78f6d-d6qpc,Uid:8473a009-dc73-4c8b-8130-e685ebed00a1,Namespace:calico-system,Attempt:0,} returns sandbox id \"dea8fca05bdca43e68aa427e8893d0adcdd4ebf772cd0ce514de97ee8300e6e3\"" Jul 2 07:57:43.587587 env[1729]: time="2024-07-02T07:57:43.587541192Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 07:57:43.599376 kubelet[2694]: E0702 07:57:43.599286 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.599376 kubelet[2694]: W0702 07:57:43.599304 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.599376 kubelet[2694]: E0702 07:57:43.599330 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.700303 kubelet[2694]: E0702 07:57:43.700189 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.700303 kubelet[2694]: W0702 07:57:43.700211 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.700303 kubelet[2694]: E0702 07:57:43.700239 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.801272 kubelet[2694]: E0702 07:57:43.801242 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.801272 kubelet[2694]: W0702 07:57:43.801264 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.801504 kubelet[2694]: E0702 07:57:43.801292 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:43.902657 kubelet[2694]: E0702 07:57:43.902618 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:43.902657 kubelet[2694]: W0702 07:57:43.902643 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:43.902657 kubelet[2694]: E0702 07:57:43.902670 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.003483 kubelet[2694]: E0702 07:57:44.003378 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.003483 kubelet[2694]: W0702 07:57:44.003401 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.003483 kubelet[2694]: E0702 07:57:44.003434 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.024000 audit[3249]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=3249 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:44.024000 audit[3249]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd0927e7d0 a2=0 a3=7ffd0927e7bc items=0 ppid=2928 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:44.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:44.025000 audit[3249]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3249 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:57:44.025000 audit[3249]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd0927e7d0 a2=0 a3=0 items=0 ppid=2928 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:44.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:57:44.105577 kubelet[2694]: E0702 07:57:44.105330 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.105577 kubelet[2694]: W0702 07:57:44.105358 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.105577 kubelet[2694]: E0702 07:57:44.105429 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.206315 kubelet[2694]: E0702 07:57:44.206201 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.206315 kubelet[2694]: W0702 07:57:44.206224 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.206315 kubelet[2694]: E0702 07:57:44.206251 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.308315 kubelet[2694]: E0702 07:57:44.308225 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.308508 kubelet[2694]: W0702 07:57:44.308489 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.308627 kubelet[2694]: E0702 07:57:44.308615 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.409484 kubelet[2694]: E0702 07:57:44.409441 2694 secret.go:194] Couldn't get secret calico-system/node-certs: failed to sync secret cache: timed out waiting for the condition Jul 2 07:57:44.410782 kubelet[2694]: E0702 07:57:44.410758 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.410782 kubelet[2694]: W0702 07:57:44.410784 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.411119 kubelet[2694]: E0702 07:57:44.410895 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.412202 kubelet[2694]: E0702 07:57:44.412175 2694 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-node-certs podName:7b37db3f-e20f-42d0-b723-a1ea7ee1e751 nodeName:}" failed. No retries permitted until 2024-07-02 07:57:44.910567587 +0000 UTC m=+19.996118517 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "node-certs" (UniqueName: "kubernetes.io/secret/7b37db3f-e20f-42d0-b723-a1ea7ee1e751-node-certs") pod "calico-node-qhsj4" (UID: "7b37db3f-e20f-42d0-b723-a1ea7ee1e751") : failed to sync secret cache: timed out waiting for the condition Jul 2 07:57:44.513439 kubelet[2694]: E0702 07:57:44.513407 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.513439 kubelet[2694]: W0702 07:57:44.513435 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.513704 kubelet[2694]: E0702 07:57:44.513463 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.614756 kubelet[2694]: E0702 07:57:44.614471 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.614756 kubelet[2694]: W0702 07:57:44.614498 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.614756 kubelet[2694]: E0702 07:57:44.614526 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.715872 kubelet[2694]: E0702 07:57:44.715841 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.715872 kubelet[2694]: W0702 07:57:44.715863 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.716223 kubelet[2694]: E0702 07:57:44.715893 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.816660 kubelet[2694]: E0702 07:57:44.816624 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.816660 kubelet[2694]: W0702 07:57:44.816654 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.816896 kubelet[2694]: E0702 07:57:44.816683 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.919433 kubelet[2694]: E0702 07:57:44.918311 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.919433 kubelet[2694]: W0702 07:57:44.918332 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.919433 kubelet[2694]: E0702 07:57:44.918358 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.919433 kubelet[2694]: E0702 07:57:44.918679 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.919433 kubelet[2694]: W0702 07:57:44.918690 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.919433 kubelet[2694]: E0702 07:57:44.918718 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.921242 kubelet[2694]: E0702 07:57:44.920487 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.921242 kubelet[2694]: W0702 07:57:44.920505 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.921242 kubelet[2694]: E0702 07:57:44.920526 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.921242 kubelet[2694]: E0702 07:57:44.920990 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.921242 kubelet[2694]: W0702 07:57:44.921001 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.921242 kubelet[2694]: E0702 07:57:44.921033 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.922068 kubelet[2694]: E0702 07:57:44.921706 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.922068 kubelet[2694]: W0702 07:57:44.921719 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.922068 kubelet[2694]: E0702 07:57:44.921737 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.933426 kubelet[2694]: E0702 07:57:44.933404 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:44.933897 kubelet[2694]: W0702 07:57:44.933873 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:44.934075 kubelet[2694]: E0702 07:57:44.934061 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:44.994505 env[1729]: time="2024-07-02T07:57:44.994453260Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qhsj4,Uid:7b37db3f-e20f-42d0-b723-a1ea7ee1e751,Namespace:calico-system,Attempt:0,}" Jul 2 07:57:45.066484 env[1729]: time="2024-07-02T07:57:45.066351867Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:57:45.066484 env[1729]: time="2024-07-02T07:57:45.066433751Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:57:45.066484 env[1729]: time="2024-07-02T07:57:45.066466720Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:57:45.068172 env[1729]: time="2024-07-02T07:57:45.068091296Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5 pid=3273 runtime=io.containerd.runc.v2 Jul 2 07:57:45.192774 systemd[1]: Started cri-containerd-bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5.scope. Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.246000 audit: BPF prog-id=128 op=LOAD Jul 2 07:57:45.248000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.248000 audit[3284]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3273 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:45.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303662336333326565303338336638666266383366653733646334 Jul 2 07:57:45.248000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250473 kubelet[2694]: E0702 07:57:45.250445 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:45.248000 audit[3284]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3273 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:45.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303662336333326565303338336638666266383366653733646334 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.249000 audit: BPF prog-id=129 op=LOAD Jul 2 07:57:45.249000 audit[3284]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000380630 items=0 ppid=3273 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:45.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303662336333326565303338336638666266383366653733646334 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.250000 audit: BPF prog-id=130 op=LOAD Jul 2 07:57:45.250000 audit[3284]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000380678 items=0 ppid=3273 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:45.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303662336333326565303338336638666266383366653733646334 Jul 2 07:57:45.250000 audit: BPF prog-id=130 op=UNLOAD Jul 2 07:57:45.250000 audit: BPF prog-id=129 op=UNLOAD Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { perfmon } for pid=3284 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit[3284]: AVC avc: denied { bpf } for pid=3284 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:45.251000 audit: BPF prog-id=131 op=LOAD Jul 2 07:57:45.251000 audit[3284]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000380a88 items=0 ppid=3273 pid=3284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:45.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266303662336333326565303338336638666266383366653733646334 Jul 2 07:57:45.283289 env[1729]: time="2024-07-02T07:57:45.283244440Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qhsj4,Uid:7b37db3f-e20f-42d0-b723-a1ea7ee1e751,Namespace:calico-system,Attempt:0,} returns sandbox id \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\"" Jul 2 07:57:45.296315 systemd[1]: run-containerd-runc-k8s.io-bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5-runc.yqwdNX.mount: Deactivated successfully. Jul 2 07:57:46.429235 env[1729]: time="2024-07-02T07:57:46.429189676Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:46.433459 env[1729]: time="2024-07-02T07:57:46.433410710Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:46.436636 env[1729]: time="2024-07-02T07:57:46.436596097Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:46.440560 env[1729]: time="2024-07-02T07:57:46.440442710Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:46.440963 env[1729]: time="2024-07-02T07:57:46.440897523Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc\"" Jul 2 07:57:46.454553 env[1729]: time="2024-07-02T07:57:46.454496220Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 07:57:46.466563 env[1729]: time="2024-07-02T07:57:46.466501370Z" level=info msg="CreateContainer within sandbox \"dea8fca05bdca43e68aa427e8893d0adcdd4ebf772cd0ce514de97ee8300e6e3\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 07:57:46.498471 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1718327761.mount: Deactivated successfully. Jul 2 07:57:46.503155 env[1729]: time="2024-07-02T07:57:46.503108197Z" level=info msg="CreateContainer within sandbox \"dea8fca05bdca43e68aa427e8893d0adcdd4ebf772cd0ce514de97ee8300e6e3\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"50ff771161093a59001748f5d5217b77d1872b4ebed0ade27570c8ab614690f7\"" Jul 2 07:57:46.504144 env[1729]: time="2024-07-02T07:57:46.504110661Z" level=info msg="StartContainer for \"50ff771161093a59001748f5d5217b77d1872b4ebed0ade27570c8ab614690f7\"" Jul 2 07:57:46.556715 systemd[1]: Started cri-containerd-50ff771161093a59001748f5d5217b77d1872b4ebed0ade27570c8ab614690f7.scope. Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.575000 audit: BPF prog-id=132 op=LOAD Jul 2 07:57:46.577000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.577000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=3178 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:46.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530666637373131363130393361353930303137343866356435323137 Jul 2 07:57:46.577000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.577000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=3178 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:46.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530666637373131363130393361353930303137343866356435323137 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.578000 audit: BPF prog-id=133 op=LOAD Jul 2 07:57:46.578000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000240730 items=0 ppid=3178 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:46.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530666637373131363130393361353930303137343866356435323137 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.579000 audit: BPF prog-id=134 op=LOAD Jul 2 07:57:46.579000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000240778 items=0 ppid=3178 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:46.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530666637373131363130393361353930303137343866356435323137 Jul 2 07:57:46.580000 audit: BPF prog-id=134 op=UNLOAD Jul 2 07:57:46.580000 audit: BPF prog-id=133 op=UNLOAD Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { perfmon } for pid=3316 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit[3316]: AVC avc: denied { bpf } for pid=3316 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:46.580000 audit: BPF prog-id=135 op=LOAD Jul 2 07:57:46.580000 audit[3316]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000240b88 items=0 ppid=3178 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:46.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530666637373131363130393361353930303137343866356435323137 Jul 2 07:57:46.621805 env[1729]: time="2024-07-02T07:57:46.621740113Z" level=info msg="StartContainer for \"50ff771161093a59001748f5d5217b77d1872b4ebed0ade27570c8ab614690f7\" returns successfully" Jul 2 07:57:47.251495 kubelet[2694]: E0702 07:57:47.249503 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:47.425825 kubelet[2694]: E0702 07:57:47.425784 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.425825 kubelet[2694]: W0702 07:57:47.425818 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.426294 kubelet[2694]: E0702 07:57:47.425845 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.426350 kubelet[2694]: E0702 07:57:47.426295 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.426350 kubelet[2694]: W0702 07:57:47.426309 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.426350 kubelet[2694]: E0702 07:57:47.426331 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.426575 kubelet[2694]: E0702 07:57:47.426522 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.426575 kubelet[2694]: W0702 07:57:47.426566 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.426726 kubelet[2694]: E0702 07:57:47.426584 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.426792 kubelet[2694]: E0702 07:57:47.426774 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.426792 kubelet[2694]: W0702 07:57:47.426786 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.427046 kubelet[2694]: E0702 07:57:47.426802 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.427188 kubelet[2694]: E0702 07:57:47.427170 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.427188 kubelet[2694]: W0702 07:57:47.427185 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.427321 kubelet[2694]: E0702 07:57:47.427203 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.427406 kubelet[2694]: E0702 07:57:47.427387 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.427406 kubelet[2694]: W0702 07:57:47.427402 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.427515 kubelet[2694]: E0702 07:57:47.427420 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.427695 kubelet[2694]: E0702 07:57:47.427686 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.427750 kubelet[2694]: W0702 07:57:47.427696 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.427750 kubelet[2694]: E0702 07:57:47.427713 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.427986 kubelet[2694]: E0702 07:57:47.427971 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.427986 kubelet[2694]: W0702 07:57:47.427983 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.428093 kubelet[2694]: E0702 07:57:47.427999 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.428310 kubelet[2694]: E0702 07:57:47.428292 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.428310 kubelet[2694]: W0702 07:57:47.428307 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.428448 kubelet[2694]: E0702 07:57:47.428325 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.428582 kubelet[2694]: E0702 07:57:47.428565 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.428582 kubelet[2694]: W0702 07:57:47.428579 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.428925 kubelet[2694]: E0702 07:57:47.428595 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.429085 kubelet[2694]: E0702 07:57:47.429016 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.429085 kubelet[2694]: W0702 07:57:47.429032 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.429216 kubelet[2694]: E0702 07:57:47.429088 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.429413 kubelet[2694]: E0702 07:57:47.429394 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.429413 kubelet[2694]: W0702 07:57:47.429408 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.429608 kubelet[2694]: E0702 07:57:47.429425 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.430050 kubelet[2694]: E0702 07:57:47.429932 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.430050 kubelet[2694]: W0702 07:57:47.430042 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.430177 kubelet[2694]: E0702 07:57:47.430063 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.430422 kubelet[2694]: E0702 07:57:47.430405 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.430422 kubelet[2694]: W0702 07:57:47.430419 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.431148 kubelet[2694]: E0702 07:57:47.430436 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.431250 kubelet[2694]: E0702 07:57:47.431225 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.431250 kubelet[2694]: W0702 07:57:47.431238 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.431344 kubelet[2694]: E0702 07:57:47.431257 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.473777 kubelet[2694]: E0702 07:57:47.473739 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.473777 kubelet[2694]: W0702 07:57:47.473769 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.474884 kubelet[2694]: E0702 07:57:47.473800 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.475269 kubelet[2694]: E0702 07:57:47.475242 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.475269 kubelet[2694]: W0702 07:57:47.475266 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.475433 kubelet[2694]: E0702 07:57:47.475300 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.475665 kubelet[2694]: E0702 07:57:47.475636 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.475665 kubelet[2694]: W0702 07:57:47.475654 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.475832 kubelet[2694]: E0702 07:57:47.475679 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.475989 kubelet[2694]: E0702 07:57:47.475943 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.475989 kubelet[2694]: W0702 07:57:47.475953 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.475989 kubelet[2694]: E0702 07:57:47.475975 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.476223 kubelet[2694]: E0702 07:57:47.476204 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.476223 kubelet[2694]: W0702 07:57:47.476219 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.476386 kubelet[2694]: E0702 07:57:47.476322 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.476469 kubelet[2694]: E0702 07:57:47.476450 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.476469 kubelet[2694]: W0702 07:57:47.476468 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.482604 kubelet[2694]: E0702 07:57:47.482572 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.483439 kubelet[2694]: E0702 07:57:47.483422 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.483561 kubelet[2694]: W0702 07:57:47.483443 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.483561 kubelet[2694]: E0702 07:57:47.483475 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.483800 kubelet[2694]: E0702 07:57:47.483771 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.483800 kubelet[2694]: W0702 07:57:47.483789 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.483937 kubelet[2694]: E0702 07:57:47.483889 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.484040 kubelet[2694]: E0702 07:57:47.484027 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.484122 kubelet[2694]: W0702 07:57:47.484041 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.484282 kubelet[2694]: E0702 07:57:47.484134 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.484397 kubelet[2694]: E0702 07:57:47.484383 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.484488 kubelet[2694]: W0702 07:57:47.484398 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.484592 kubelet[2694]: E0702 07:57:47.484492 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.484679 kubelet[2694]: E0702 07:57:47.484666 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.484758 kubelet[2694]: W0702 07:57:47.484680 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.484758 kubelet[2694]: E0702 07:57:47.484699 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.484972 kubelet[2694]: E0702 07:57:47.484943 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.484972 kubelet[2694]: W0702 07:57:47.484958 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.485086 kubelet[2694]: E0702 07:57:47.484978 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.485864 kubelet[2694]: E0702 07:57:47.485840 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.485864 kubelet[2694]: W0702 07:57:47.485856 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.486509 kubelet[2694]: E0702 07:57:47.485878 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.487193 kubelet[2694]: E0702 07:57:47.487176 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.487193 kubelet[2694]: W0702 07:57:47.487193 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.487381 kubelet[2694]: E0702 07:57:47.487215 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.488019 kubelet[2694]: E0702 07:57:47.487997 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.488139 kubelet[2694]: W0702 07:57:47.488020 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.488139 kubelet[2694]: E0702 07:57:47.488121 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.489002 kubelet[2694]: E0702 07:57:47.488983 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.489002 kubelet[2694]: W0702 07:57:47.489000 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.489185 kubelet[2694]: E0702 07:57:47.489098 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.489274 kubelet[2694]: E0702 07:57:47.489257 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.489274 kubelet[2694]: W0702 07:57:47.489273 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.489435 kubelet[2694]: E0702 07:57:47.489361 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.489512 kubelet[2694]: E0702 07:57:47.489499 2694 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:57:47.489608 kubelet[2694]: W0702 07:57:47.489513 2694 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:57:47.489608 kubelet[2694]: E0702 07:57:47.489528 2694 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:57:47.805565 env[1729]: time="2024-07-02T07:57:47.805490250Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:47.810358 env[1729]: time="2024-07-02T07:57:47.810310886Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:47.814636 env[1729]: time="2024-07-02T07:57:47.814585385Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:47.817910 env[1729]: time="2024-07-02T07:57:47.817837542Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:47.818802 env[1729]: time="2024-07-02T07:57:47.818757594Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9\"" Jul 2 07:57:47.822353 env[1729]: time="2024-07-02T07:57:47.822302541Z" level=info msg="CreateContainer within sandbox \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 07:57:47.851641 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1673125298.mount: Deactivated successfully. Jul 2 07:57:47.883876 env[1729]: time="2024-07-02T07:57:47.883716923Z" level=info msg="CreateContainer within sandbox \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d\"" Jul 2 07:57:47.884933 env[1729]: time="2024-07-02T07:57:47.884895515Z" level=info msg="StartContainer for \"f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d\"" Jul 2 07:57:47.921682 systemd[1]: Started cri-containerd-f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d.scope. Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.968178 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 2 07:57:47.968355 kernel: audit: type=1400 audit(1719907067.966:964): avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f0fd411f6d8 items=0 ppid=3273 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:47.980821 kernel: audit: type=1300 audit(1719907067.966:964): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f0fd411f6d8 items=0 ppid=3273 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:47.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638396263323033333363656364323032363333353865653064323631 Jul 2 07:57:48.000155 kernel: audit: type=1327 audit(1719907067.966:964): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638396263323033333363656364323032363333353865653064323631 Jul 2 07:57:48.000271 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:48.015724 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:48.037203 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:48.037349 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:48.057947 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:48.069128 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:48.069232 kernel: audit: type=1400 audit(1719907067.966:965): avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.966000 audit: BPF prog-id=136 op=LOAD Jul 2 07:57:47.966000 audit[3386]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001fa768 items=0 ppid=3273 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:47.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638396263323033333363656364323032363333353865653064323631 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit: BPF prog-id=137 op=LOAD Jul 2 07:57:47.971000 audit[3386]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001fa7b8 items=0 ppid=3273 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:47.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638396263323033333363656364323032363333353865653064323631 Jul 2 07:57:47.971000 audit: BPF prog-id=137 op=UNLOAD Jul 2 07:57:47.971000 audit: BPF prog-id=136 op=UNLOAD Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { perfmon } for pid=3386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit[3386]: AVC avc: denied { bpf } for pid=3386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:47.971000 audit: BPF prog-id=138 op=LOAD Jul 2 07:57:47.971000 audit[3386]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001fa848 items=0 ppid=3273 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:47.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638396263323033333363656364323032363333353865653064323631 Jul 2 07:57:48.074361 env[1729]: time="2024-07-02T07:57:48.072276404Z" level=info msg="StartContainer for \"f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d\" returns successfully" Jul 2 07:57:48.112417 systemd[1]: cri-containerd-f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d.scope: Deactivated successfully. Jul 2 07:57:48.117000 audit: BPF prog-id=138 op=UNLOAD Jul 2 07:57:48.179444 env[1729]: time="2024-07-02T07:57:48.179386625Z" level=info msg="shim disconnected" id=f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d Jul 2 07:57:48.179444 env[1729]: time="2024-07-02T07:57:48.179437584Z" level=warning msg="cleaning up after shim disconnected" id=f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d namespace=k8s.io Jul 2 07:57:48.179444 env[1729]: time="2024-07-02T07:57:48.179449967Z" level=info msg="cleaning up dead shim" Jul 2 07:57:48.200996 env[1729]: time="2024-07-02T07:57:48.200715656Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:57:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3424 runtime=io.containerd.runc.v2\n" Jul 2 07:57:48.346690 kubelet[2694]: I0702 07:57:48.344921 2694 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 07:57:48.349334 env[1729]: time="2024-07-02T07:57:48.349296545Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 07:57:48.384329 kubelet[2694]: I0702 07:57:48.384294 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6c45b78f6d-d6qpc" podStartSLOduration=2.528092906 podCreationTimestamp="2024-07-02 07:57:43 +0000 UTC" firstStartedPulling="2024-07-02 07:57:43.585328668 +0000 UTC m=+18.670879591" lastFinishedPulling="2024-07-02 07:57:46.441469364 +0000 UTC m=+21.527020289" observedRunningTime="2024-07-02 07:57:47.369211055 +0000 UTC m=+22.454761986" watchObservedRunningTime="2024-07-02 07:57:48.384233604 +0000 UTC m=+23.469784543" Jul 2 07:57:48.453463 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f89bc20333cecd20263358ee0d2616e7fac39872e3bf0c1f03ba6fdb6f97099d-rootfs.mount: Deactivated successfully. Jul 2 07:57:49.248828 kubelet[2694]: E0702 07:57:49.248781 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:51.255339 kubelet[2694]: E0702 07:57:51.255295 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:53.250671 kubelet[2694]: E0702 07:57:53.250641 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:53.569856 env[1729]: time="2024-07-02T07:57:53.569587034Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:53.576141 env[1729]: time="2024-07-02T07:57:53.576088239Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:53.584368 env[1729]: time="2024-07-02T07:57:53.584324199Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:53.590677 env[1729]: time="2024-07-02T07:57:53.590631161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:57:53.592648 env[1729]: time="2024-07-02T07:57:53.592606757Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7\"" Jul 2 07:57:53.596315 env[1729]: time="2024-07-02T07:57:53.596272487Z" level=info msg="CreateContainer within sandbox \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 07:57:53.642510 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount817133264.mount: Deactivated successfully. Jul 2 07:57:53.667902 env[1729]: time="2024-07-02T07:57:53.667726827Z" level=info msg="CreateContainer within sandbox \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef\"" Jul 2 07:57:53.670637 env[1729]: time="2024-07-02T07:57:53.668681336Z" level=info msg="StartContainer for \"70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef\"" Jul 2 07:57:53.746049 systemd[1]: run-containerd-runc-k8s.io-70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef-runc.xROHED.mount: Deactivated successfully. Jul 2 07:57:53.750347 systemd[1]: Started cri-containerd-70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef.scope. Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.790770 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 2 07:57:53.791028 kernel: audit: type=1400 audit(1719907073.785:971): avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f1fec694718 items=0 ppid=3273 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:53.797103 kernel: audit: type=1300 audit(1719907073.785:971): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f1fec694718 items=0 ppid=3273 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:53.797203 kernel: audit: type=1327 audit(1719907073.785:971): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663539376136623533393461323839643630396433376537373665 Jul 2 07:57:53.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663539376136623533393461323839643630396433376537373665 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.814645 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.824188 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.832569 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.857008 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.857109 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.857143 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.857174 kernel: audit: type=1400 audit(1719907073.785:972): avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit: BPF prog-id=139 op=LOAD Jul 2 07:57:53.785000 audit[3449]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000210708 items=0 ppid=3273 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:53.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663539376136623533393461323839643630396433376537373665 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit: BPF prog-id=140 op=LOAD Jul 2 07:57:53.785000 audit[3449]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000210758 items=0 ppid=3273 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:53.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663539376136623533393461323839643630396433376537373665 Jul 2 07:57:53.785000 audit: BPF prog-id=140 op=UNLOAD Jul 2 07:57:53.785000 audit: BPF prog-id=139 op=UNLOAD Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { perfmon } for pid=3449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit[3449]: AVC avc: denied { bpf } for pid=3449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:57:53.785000 audit: BPF prog-id=141 op=LOAD Jul 2 07:57:53.785000 audit[3449]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0002107e8 items=0 ppid=3273 pid=3449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:57:53.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730663539376136623533393461323839643630396433376537373665 Jul 2 07:57:53.861464 env[1729]: time="2024-07-02T07:57:53.861410621Z" level=info msg="StartContainer for \"70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef\" returns successfully" Jul 2 07:57:54.679708 env[1729]: time="2024-07-02T07:57:54.679111414Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:57:54.683984 systemd[1]: cri-containerd-70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef.scope: Deactivated successfully. Jul 2 07:57:54.686000 audit: BPF prog-id=141 op=UNLOAD Jul 2 07:57:54.707567 kubelet[2694]: I0702 07:57:54.707525 2694 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Jul 2 07:57:54.727178 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef-rootfs.mount: Deactivated successfully. Jul 2 07:57:54.738986 env[1729]: time="2024-07-02T07:57:54.738926176Z" level=info msg="shim disconnected" id=70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef Jul 2 07:57:54.739598 env[1729]: time="2024-07-02T07:57:54.739005632Z" level=warning msg="cleaning up after shim disconnected" id=70f597a6b5394a289d609d37e776e949ffbbe2ad8dbf9ee6ab864d67857805ef namespace=k8s.io Jul 2 07:57:54.739598 env[1729]: time="2024-07-02T07:57:54.739019153Z" level=info msg="cleaning up dead shim" Jul 2 07:57:54.761197 env[1729]: time="2024-07-02T07:57:54.761151975Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:57:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3490 runtime=io.containerd.runc.v2\n" Jul 2 07:57:54.764211 kubelet[2694]: I0702 07:57:54.764157 2694 topology_manager.go:215] "Topology Admit Handler" podUID="de8ff49c-6fb7-45da-90fe-6833a98bffc8" podNamespace="kube-system" podName="coredns-5dd5756b68-wc4nr" Jul 2 07:57:54.795762 systemd[1]: Created slice kubepods-burstable-podde8ff49c_6fb7_45da_90fe_6833a98bffc8.slice. Jul 2 07:57:54.810365 kubelet[2694]: I0702 07:57:54.810315 2694 topology_manager.go:215] "Topology Admit Handler" podUID="435db17a-f771-4cee-8299-f0d293960c11" podNamespace="kube-system" podName="coredns-5dd5756b68-sbdzz" Jul 2 07:57:54.810589 kubelet[2694]: I0702 07:57:54.810558 2694 topology_manager.go:215] "Topology Admit Handler" podUID="dc5b3d02-77da-4eaa-954b-c4949cdbede2" podNamespace="calico-system" podName="calico-kube-controllers-78794c487b-k5d6t" Jul 2 07:57:54.841614 systemd[1]: Created slice kubepods-besteffort-poddc5b3d02_77da_4eaa_954b_c4949cdbede2.slice. Jul 2 07:57:54.851713 kubelet[2694]: I0702 07:57:54.845515 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dc5b3d02-77da-4eaa-954b-c4949cdbede2-tigera-ca-bundle\") pod \"calico-kube-controllers-78794c487b-k5d6t\" (UID: \"dc5b3d02-77da-4eaa-954b-c4949cdbede2\") " pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" Jul 2 07:57:54.851713 kubelet[2694]: I0702 07:57:54.845590 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wwl7k\" (UniqueName: \"kubernetes.io/projected/435db17a-f771-4cee-8299-f0d293960c11-kube-api-access-wwl7k\") pod \"coredns-5dd5756b68-sbdzz\" (UID: \"435db17a-f771-4cee-8299-f0d293960c11\") " pod="kube-system/coredns-5dd5756b68-sbdzz" Jul 2 07:57:54.851713 kubelet[2694]: I0702 07:57:54.849898 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/435db17a-f771-4cee-8299-f0d293960c11-config-volume\") pod \"coredns-5dd5756b68-sbdzz\" (UID: \"435db17a-f771-4cee-8299-f0d293960c11\") " pod="kube-system/coredns-5dd5756b68-sbdzz" Jul 2 07:57:54.851713 kubelet[2694]: I0702 07:57:54.849976 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2gldg\" (UniqueName: \"kubernetes.io/projected/dc5b3d02-77da-4eaa-954b-c4949cdbede2-kube-api-access-2gldg\") pod \"calico-kube-controllers-78794c487b-k5d6t\" (UID: \"dc5b3d02-77da-4eaa-954b-c4949cdbede2\") " pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" Jul 2 07:57:54.851713 kubelet[2694]: I0702 07:57:54.850884 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ch4nv\" (UniqueName: \"kubernetes.io/projected/de8ff49c-6fb7-45da-90fe-6833a98bffc8-kube-api-access-ch4nv\") pod \"coredns-5dd5756b68-wc4nr\" (UID: \"de8ff49c-6fb7-45da-90fe-6833a98bffc8\") " pod="kube-system/coredns-5dd5756b68-wc4nr" Jul 2 07:57:54.852673 kubelet[2694]: I0702 07:57:54.850947 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/de8ff49c-6fb7-45da-90fe-6833a98bffc8-config-volume\") pod \"coredns-5dd5756b68-wc4nr\" (UID: \"de8ff49c-6fb7-45da-90fe-6833a98bffc8\") " pod="kube-system/coredns-5dd5756b68-wc4nr" Jul 2 07:57:54.865234 systemd[1]: Created slice kubepods-burstable-pod435db17a_f771_4cee_8299_f0d293960c11.slice. Jul 2 07:57:55.146572 env[1729]: time="2024-07-02T07:57:55.146295637Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-wc4nr,Uid:de8ff49c-6fb7-45da-90fe-6833a98bffc8,Namespace:kube-system,Attempt:0,}" Jul 2 07:57:55.160443 env[1729]: time="2024-07-02T07:57:55.160325947Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78794c487b-k5d6t,Uid:dc5b3d02-77da-4eaa-954b-c4949cdbede2,Namespace:calico-system,Attempt:0,}" Jul 2 07:57:55.177564 env[1729]: time="2024-07-02T07:57:55.177390703Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-sbdzz,Uid:435db17a-f771-4cee-8299-f0d293960c11,Namespace:kube-system,Attempt:0,}" Jul 2 07:57:55.257569 systemd[1]: Created slice kubepods-besteffort-pod5f9d1ef0_c803_4c2a_a4d6_d10fc80db794.slice. Jul 2 07:57:55.262487 env[1729]: time="2024-07-02T07:57:55.262443328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sq7vd,Uid:5f9d1ef0-c803-4c2a-a4d6-d10fc80db794,Namespace:calico-system,Attempt:0,}" Jul 2 07:57:55.393406 env[1729]: time="2024-07-02T07:57:55.393357278Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 07:57:55.503802 env[1729]: time="2024-07-02T07:57:55.503717148Z" level=error msg="Failed to destroy network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.504472 env[1729]: time="2024-07-02T07:57:55.504418418Z" level=error msg="encountered an error cleaning up failed sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.504632 env[1729]: time="2024-07-02T07:57:55.504503305Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-sbdzz,Uid:435db17a-f771-4cee-8299-f0d293960c11,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.508558 kubelet[2694]: E0702 07:57:55.508510 2694 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.508720 kubelet[2694]: E0702 07:57:55.508623 2694 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-sbdzz" Jul 2 07:57:55.508720 kubelet[2694]: E0702 07:57:55.508667 2694 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-sbdzz" Jul 2 07:57:55.511253 kubelet[2694]: E0702 07:57:55.511199 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-sbdzz_kube-system(435db17a-f771-4cee-8299-f0d293960c11)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-sbdzz_kube-system(435db17a-f771-4cee-8299-f0d293960c11)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-sbdzz" podUID="435db17a-f771-4cee-8299-f0d293960c11" Jul 2 07:57:55.511848 env[1729]: time="2024-07-02T07:57:55.511793140Z" level=error msg="Failed to destroy network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.513549 env[1729]: time="2024-07-02T07:57:55.513421009Z" level=error msg="encountered an error cleaning up failed sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.513665 env[1729]: time="2024-07-02T07:57:55.513592003Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-wc4nr,Uid:de8ff49c-6fb7-45da-90fe-6833a98bffc8,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.513921 kubelet[2694]: E0702 07:57:55.513872 2694 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.514031 kubelet[2694]: E0702 07:57:55.513992 2694 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-wc4nr" Jul 2 07:57:55.514031 kubelet[2694]: E0702 07:57:55.514022 2694 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-wc4nr" Jul 2 07:57:55.514136 kubelet[2694]: E0702 07:57:55.514104 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-wc4nr_kube-system(de8ff49c-6fb7-45da-90fe-6833a98bffc8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-wc4nr_kube-system(de8ff49c-6fb7-45da-90fe-6833a98bffc8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-wc4nr" podUID="de8ff49c-6fb7-45da-90fe-6833a98bffc8" Jul 2 07:57:55.518705 env[1729]: time="2024-07-02T07:57:55.518652466Z" level=error msg="Failed to destroy network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.519285 env[1729]: time="2024-07-02T07:57:55.519242588Z" level=error msg="encountered an error cleaning up failed sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.519487 env[1729]: time="2024-07-02T07:57:55.519441153Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78794c487b-k5d6t,Uid:dc5b3d02-77da-4eaa-954b-c4949cdbede2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.520456 kubelet[2694]: E0702 07:57:55.520416 2694 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.520568 kubelet[2694]: E0702 07:57:55.520490 2694 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" Jul 2 07:57:55.520568 kubelet[2694]: E0702 07:57:55.520562 2694 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" Jul 2 07:57:55.520763 kubelet[2694]: E0702 07:57:55.520703 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-78794c487b-k5d6t_calico-system(dc5b3d02-77da-4eaa-954b-c4949cdbede2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-78794c487b-k5d6t_calico-system(dc5b3d02-77da-4eaa-954b-c4949cdbede2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" podUID="dc5b3d02-77da-4eaa-954b-c4949cdbede2" Jul 2 07:57:55.543325 env[1729]: time="2024-07-02T07:57:55.543161994Z" level=error msg="Failed to destroy network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.544158 env[1729]: time="2024-07-02T07:57:55.544090105Z" level=error msg="encountered an error cleaning up failed sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.544688 env[1729]: time="2024-07-02T07:57:55.544640968Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sq7vd,Uid:5f9d1ef0-c803-4c2a-a4d6-d10fc80db794,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.545182 kubelet[2694]: E0702 07:57:55.545149 2694 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:55.545294 kubelet[2694]: E0702 07:57:55.545217 2694 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:55.545294 kubelet[2694]: E0702 07:57:55.545284 2694 kuberuntime_manager.go:1171] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-sq7vd" Jul 2 07:57:55.545967 kubelet[2694]: E0702 07:57:55.545713 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-sq7vd_calico-system(5f9d1ef0-c803-4c2a-a4d6-d10fc80db794)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-sq7vd_calico-system(5f9d1ef0-c803-4c2a-a4d6-d10fc80db794)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:57:55.723939 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273-shm.mount: Deactivated successfully. Jul 2 07:57:56.381148 kubelet[2694]: I0702 07:57:56.381115 2694 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:57:56.385491 kubelet[2694]: I0702 07:57:56.385449 2694 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:57:56.399290 env[1729]: time="2024-07-02T07:57:56.399244535Z" level=info msg="StopPodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\"" Jul 2 07:57:56.427727 env[1729]: time="2024-07-02T07:57:56.427675154Z" level=info msg="StopPodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\"" Jul 2 07:57:56.431227 kubelet[2694]: I0702 07:57:56.431197 2694 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:57:56.437712 env[1729]: time="2024-07-02T07:57:56.437452504Z" level=info msg="StopPodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\"" Jul 2 07:57:56.438150 kubelet[2694]: I0702 07:57:56.438120 2694 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:57:56.446775 env[1729]: time="2024-07-02T07:57:56.446730119Z" level=info msg="StopPodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\"" Jul 2 07:57:56.607386 env[1729]: time="2024-07-02T07:57:56.607315419Z" level=error msg="StopPodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" failed" error="failed to destroy network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:56.608457 kubelet[2694]: E0702 07:57:56.608277 2694 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:57:56.613604 kubelet[2694]: E0702 07:57:56.613390 2694 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb"} Jul 2 07:57:56.613604 kubelet[2694]: E0702 07:57:56.613485 2694 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dc5b3d02-77da-4eaa-954b-c4949cdbede2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:57:56.613604 kubelet[2694]: E0702 07:57:56.613558 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dc5b3d02-77da-4eaa-954b-c4949cdbede2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" podUID="dc5b3d02-77da-4eaa-954b-c4949cdbede2" Jul 2 07:57:56.617418 env[1729]: time="2024-07-02T07:57:56.617352797Z" level=error msg="StopPodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" failed" error="failed to destroy network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:56.618094 kubelet[2694]: E0702 07:57:56.617827 2694 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:57:56.618094 kubelet[2694]: E0702 07:57:56.617890 2694 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7"} Jul 2 07:57:56.618094 kubelet[2694]: E0702 07:57:56.617939 2694 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"435db17a-f771-4cee-8299-f0d293960c11\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:57:56.618094 kubelet[2694]: E0702 07:57:56.618039 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"435db17a-f771-4cee-8299-f0d293960c11\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-sbdzz" podUID="435db17a-f771-4cee-8299-f0d293960c11" Jul 2 07:57:56.658679 env[1729]: time="2024-07-02T07:57:56.656572060Z" level=error msg="StopPodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" failed" error="failed to destroy network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:56.658849 kubelet[2694]: E0702 07:57:56.656899 2694 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:57:56.658849 kubelet[2694]: E0702 07:57:56.656945 2694 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273"} Jul 2 07:57:56.658849 kubelet[2694]: E0702 07:57:56.656999 2694 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"de8ff49c-6fb7-45da-90fe-6833a98bffc8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:57:56.658849 kubelet[2694]: E0702 07:57:56.657048 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"de8ff49c-6fb7-45da-90fe-6833a98bffc8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-wc4nr" podUID="de8ff49c-6fb7-45da-90fe-6833a98bffc8" Jul 2 07:57:56.659735 env[1729]: time="2024-07-02T07:57:56.659628075Z" level=error msg="StopPodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" failed" error="failed to destroy network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:57:56.660324 kubelet[2694]: E0702 07:57:56.660152 2694 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:57:56.660324 kubelet[2694]: E0702 07:57:56.660199 2694 kuberuntime_manager.go:1380] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c"} Jul 2 07:57:56.660324 kubelet[2694]: E0702 07:57:56.660254 2694 kuberuntime_manager.go:1080] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:57:56.660324 kubelet[2694]: E0702 07:57:56.660296 2694 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-sq7vd" podUID="5f9d1ef0-c803-4c2a-a4d6-d10fc80db794" Jul 2 07:58:02.776192 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2832079197.mount: Deactivated successfully. Jul 2 07:58:02.825038 env[1729]: time="2024-07-02T07:58:02.824984121Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:02.830216 env[1729]: time="2024-07-02T07:58:02.830082183Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:02.833832 env[1729]: time="2024-07-02T07:58:02.833786129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:02.838430 env[1729]: time="2024-07-02T07:58:02.836705418Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:02.839420 env[1729]: time="2024-07-02T07:58:02.839375499Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49\"" Jul 2 07:58:02.884321 env[1729]: time="2024-07-02T07:58:02.884244592Z" level=info msg="CreateContainer within sandbox \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 07:58:02.938355 env[1729]: time="2024-07-02T07:58:02.938302063Z" level=info msg="CreateContainer within sandbox \"bf06b3c32ee0383f8fbf83fe73dc4040816c12237c8d343cff627f5c1800d0d5\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f\"" Jul 2 07:58:02.943178 env[1729]: time="2024-07-02T07:58:02.939094353Z" level=info msg="StartContainer for \"f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f\"" Jul 2 07:58:02.988113 systemd[1]: Started cri-containerd-f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f.scope. Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.036858 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 2 07:58:03.036978 kernel: audit: type=1400 audit(1719907083.034:978): avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f8809800dc8 items=0 ppid=3273 pid=3722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:03.044625 kernel: audit: type=1300 audit(1719907083.034:978): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f8809800dc8 items=0 ppid=3273 pid=3722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:03.059327 kernel: audit: type=1327 audit(1719907083.034:978): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653232396263366630346535623135353439366634613238373032 Jul 2 07:58:03.059474 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.059518 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653232396263366630346535623135353439366634613238373032 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.076635 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.081566 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.087586 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.091618 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit: BPF prog-id=142 op=LOAD Jul 2 07:58:03.034000 audit[3722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0001f8ba8 items=0 ppid=3273 pid=3722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:03.096838 kernel: audit: type=1400 audit(1719907083.034:979): avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653232396263366630346535623135353439366634613238373032 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit: BPF prog-id=143 op=LOAD Jul 2 07:58:03.039000 audit[3722]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0001f8bf8 items=0 ppid=3273 pid=3722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:03.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653232396263366630346535623135353439366634613238373032 Jul 2 07:58:03.039000 audit: BPF prog-id=143 op=UNLOAD Jul 2 07:58:03.039000 audit: BPF prog-id=142 op=UNLOAD Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { perfmon } for pid=3722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit[3722]: AVC avc: denied { bpf } for pid=3722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:03.039000 audit: BPF prog-id=144 op=LOAD Jul 2 07:58:03.039000 audit[3722]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0001f8c88 items=0 ppid=3273 pid=3722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:03.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633653232396263366630346535623135353439366634613238373032 Jul 2 07:58:03.108710 env[1729]: time="2024-07-02T07:58:03.108669084Z" level=info msg="StartContainer for \"f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f\" returns successfully" Jul 2 07:58:03.265858 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 07:58:03.266006 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 07:58:04.530368 systemd[1]: run-containerd-runc-k8s.io-f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f-runc.P8A3dS.mount: Deactivated successfully. Jul 2 07:58:04.934000 audit[3874]: AVC avc: denied { write } for pid=3874 comm="tee" name="fd" dev="proc" ino=25059 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:04.934000 audit[3874]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdec403a1e a2=241 a3=1b6 items=1 ppid=3838 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:04.934000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 07:58:04.934000 audit: PATH item=0 name="/dev/fd/63" inode=25046 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:04.950000 audit[3866]: AVC avc: denied { write } for pid=3866 comm="tee" name="fd" dev="proc" ino=25063 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:04.950000 audit[3866]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe53884a20 a2=241 a3=1b6 items=1 ppid=3830 pid=3866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:04.934000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:04.950000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 07:58:04.950000 audit: PATH item=0 name="/dev/fd/63" inode=25045 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:04.950000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:04.962000 audit[3877]: AVC avc: denied { write } for pid=3877 comm="tee" name="fd" dev="proc" ino=25070 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:04.965000 audit[3880]: AVC avc: denied { write } for pid=3880 comm="tee" name="fd" dev="proc" ino=25073 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:04.965000 audit[3880]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5c4e4a1e a2=241 a3=1b6 items=1 ppid=3831 pid=3880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:04.965000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 07:58:04.965000 audit: PATH item=0 name="/dev/fd/63" inode=25052 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:04.965000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:04.962000 audit[3877]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff4f2eba1f a2=241 a3=1b6 items=1 ppid=3842 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:04.962000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 07:58:04.962000 audit: PATH item=0 name="/dev/fd/63" inode=25049 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:04.962000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:04.977000 audit[3897]: AVC avc: denied { write } for pid=3897 comm="tee" name="fd" dev="proc" ino=25080 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:04.977000 audit[3897]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd68eb2a0f a2=241 a3=1b6 items=1 ppid=3841 pid=3897 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:04.977000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 07:58:04.977000 audit: PATH item=0 name="/dev/fd/63" inode=25067 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:04.977000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:05.022000 audit[3905]: AVC avc: denied { write } for pid=3905 comm="tee" name="fd" dev="proc" ino=25089 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:05.022000 audit[3905]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffe86e2a1e a2=241 a3=1b6 items=1 ppid=3858 pid=3905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:05.022000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 07:58:05.022000 audit: PATH item=0 name="/dev/fd/63" inode=25689 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:05.022000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:05.043000 audit[3908]: AVC avc: denied { write } for pid=3908 comm="tee" name="fd" dev="proc" ino=25692 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:58:05.043000 audit[3908]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebe6e4a0e a2=241 a3=1b6 items=1 ppid=3836 pid=3908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:05.043000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 07:58:05.043000 audit: PATH item=0 name="/dev/fd/63" inode=25084 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:58:05.043000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:58:05.388428 kubelet[2694]: I0702 07:58:05.388054 2694 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 07:58:05.467260 kubelet[2694]: I0702 07:58:05.467221 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-qhsj4" podStartSLOduration=4.891644956 podCreationTimestamp="2024-07-02 07:57:43 +0000 UTC" firstStartedPulling="2024-07-02 07:57:45.286467852 +0000 UTC m=+20.372018772" lastFinishedPulling="2024-07-02 07:58:02.839813114 +0000 UTC m=+37.925364033" observedRunningTime="2024-07-02 07:58:03.540477808 +0000 UTC m=+38.626028751" watchObservedRunningTime="2024-07-02 07:58:05.444990217 +0000 UTC m=+40.530541149" Jul 2 07:58:05.523418 systemd[1]: run-containerd-runc-k8s.io-f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f-runc.x8UT3w.mount: Deactivated successfully. Jul 2 07:58:05.590000 audit[3933]: NETFILTER_CFG table=filter:97 family=2 entries=15 op=nft_register_rule pid=3933 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:05.590000 audit[3933]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc07a48b60 a2=0 a3=7ffc07a48b4c items=0 ppid=2928 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:05.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:05.594000 audit[3933]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=3933 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:05.594000 audit[3933]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc07a48b60 a2=0 a3=7ffc07a48b4c items=0 ppid=2928 pid=3933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:05.594000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:06.829350 (udev-worker)[4009]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:58:06.832084 systemd-networkd[1458]: vxlan.calico: Link UP Jul 2 07:58:06.832090 systemd-networkd[1458]: vxlan.calico: Gained carrier Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit: BPF prog-id=145 op=LOAD Jul 2 07:58:06.961000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff8a8b3db0 a2=70 a3=7fbf87399000 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.961000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.961000 audit: BPF prog-id=145 op=UNLOAD Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.961000 audit: BPF prog-id=146 op=LOAD Jul 2 07:58:06.961000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff8a8b3db0 a2=70 a3=6f items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.961000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.962000 audit: BPF prog-id=146 op=UNLOAD Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff8a8b3d60 a2=70 a3=7fff8a8b3db0 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.962000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit: BPF prog-id=147 op=LOAD Jul 2 07:58:06.962000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff8a8b3d40 a2=70 a3=7fff8a8b3db0 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.962000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.962000 audit: BPF prog-id=147 op=UNLOAD Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff8a8b3e20 a2=70 a3=0 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.962000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff8a8b3e10 a2=70 a3=0 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.962000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.962000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.962000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff8a8b3d80 a2=70 a3=0 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.962000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff8a8b3e50 a2=70 a3=2082a00 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.963000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff8a8b3e50 a2=70 a3=207f880 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.963000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.963000 audit: BPF prog-id=148 op=LOAD Jul 2 07:58:06.963000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff8a8b3d70 a2=70 a3=0 items=0 ppid=3955 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.963000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:58:06.972000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.972000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe82df0e30 a2=70 a3=fff80800 items=0 ppid=3955 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.972000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:58:06.972000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:06.972000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe82df0d00 a2=70 a3=3 items=0 ppid=3955 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:06.972000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:58:06.986816 (udev-worker)[4020]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:58:06.996000 audit: BPF prog-id=148 op=UNLOAD Jul 2 07:58:07.116000 audit[4054]: NETFILTER_CFG table=raw:99 family=2 entries=19 op=nft_register_chain pid=4054 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:07.116000 audit[4054]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffe1f9cfae0 a2=0 a3=7ffe1f9cfacc items=0 ppid=3955 pid=4054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:07.116000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:07.120000 audit[4055]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=4055 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:07.120000 audit[4055]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc972ef970 a2=0 a3=7ffc972ef95c items=0 ppid=3955 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:07.120000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:07.127000 audit[4056]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4056 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:07.127000 audit[4056]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffeee0577b0 a2=0 a3=7ffeee05779c items=0 ppid=3955 pid=4056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:07.127000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:07.139000 audit[4058]: NETFILTER_CFG table=filter:102 family=2 entries=39 op=nft_register_chain pid=4058 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:07.139000 audit[4058]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffd38055f80 a2=0 a3=7ffd38055f6c items=0 ppid=3955 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:07.139000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:08.249845 env[1729]: time="2024-07-02T07:58:08.249736225Z" level=info msg="StopPodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\"" Jul 2 07:58:08.340962 systemd-networkd[1458]: vxlan.calico: Gained IPv6LL Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.328 [INFO][4080] k8s.go 608: Cleaning up netns ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.329 [INFO][4080] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" iface="eth0" netns="/var/run/netns/cni-ab2db5dd-ce31-3ff6-3af6-f1a464ab8f1b" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.329 [INFO][4080] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" iface="eth0" netns="/var/run/netns/cni-ab2db5dd-ce31-3ff6-3af6-f1a464ab8f1b" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.330 [INFO][4080] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" iface="eth0" netns="/var/run/netns/cni-ab2db5dd-ce31-3ff6-3af6-f1a464ab8f1b" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.330 [INFO][4080] k8s.go 615: Releasing IP address(es) ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.330 [INFO][4080] utils.go 188: Calico CNI releasing IP address ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.654 [INFO][4088] ipam_plugin.go 411: Releasing address using handleID ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.658 [INFO][4088] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.659 [INFO][4088] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.681 [WARNING][4088] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.681 [INFO][4088] ipam_plugin.go 439: Releasing address using workloadID ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.686 [INFO][4088] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:08.691043 env[1729]: 2024-07-02 07:58:08.688 [INFO][4080] k8s.go 621: Teardown processing complete. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:08.695005 systemd[1]: run-netns-cni\x2dab2db5dd\x2dce31\x2d3ff6\x2d3af6\x2df1a464ab8f1b.mount: Deactivated successfully. Jul 2 07:58:08.697284 env[1729]: time="2024-07-02T07:58:08.697228209Z" level=info msg="TearDown network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" successfully" Jul 2 07:58:08.697284 env[1729]: time="2024-07-02T07:58:08.697280394Z" level=info msg="StopPodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" returns successfully" Jul 2 07:58:08.698228 env[1729]: time="2024-07-02T07:58:08.698188808Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-sbdzz,Uid:435db17a-f771-4cee-8299-f0d293960c11,Namespace:kube-system,Attempt:1,}" Jul 2 07:58:08.873126 (udev-worker)[4038]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:58:08.873382 systemd-networkd[1458]: cali3c716abaf2a: Link UP Jul 2 07:58:08.877683 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:58:08.878082 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3c716abaf2a: link becomes ready Jul 2 07:58:08.877911 systemd-networkd[1458]: cali3c716abaf2a: Gained carrier Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.780 [INFO][4095] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0 coredns-5dd5756b68- kube-system 435db17a-f771-4cee-8299-f0d293960c11 712 0 2024-07-02 07:57:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-21-43 coredns-5dd5756b68-sbdzz eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3c716abaf2a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.780 [INFO][4095] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.816 [INFO][4106] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" HandleID="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.829 [INFO][4106] ipam_plugin.go 264: Auto assigning IP ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" HandleID="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002dfb70), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-21-43", "pod":"coredns-5dd5756b68-sbdzz", "timestamp":"2024-07-02 07:58:08.816894539 +0000 UTC"}, Hostname:"ip-172-31-21-43", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.829 [INFO][4106] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.830 [INFO][4106] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.830 [INFO][4106] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-43' Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.833 [INFO][4106] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.842 [INFO][4106] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.848 [INFO][4106] ipam.go 489: Trying affinity for 192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.851 [INFO][4106] ipam.go 155: Attempting to load block cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.853 [INFO][4106] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.853 [INFO][4106] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.49.128/26 handle="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.856 [INFO][4106] ipam.go 1685: Creating new handle: k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379 Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.860 [INFO][4106] ipam.go 1203: Writing block in order to claim IPs block=192.168.49.128/26 handle="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.865 [INFO][4106] ipam.go 1216: Successfully claimed IPs: [192.168.49.129/26] block=192.168.49.128/26 handle="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.865 [INFO][4106] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.49.129/26] handle="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" host="ip-172-31-21-43" Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.865 [INFO][4106] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:08.900007 env[1729]: 2024-07-02 07:58:08.865 [INFO][4106] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.49.129/26] IPv6=[] ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" HandleID="k8s-pod-network.922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.901775 env[1729]: 2024-07-02 07:58:08.870 [INFO][4095] k8s.go 386: Populated endpoint ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"435db17a-f771-4cee-8299-f0d293960c11", ResourceVersion:"712", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"", Pod:"coredns-5dd5756b68-sbdzz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c716abaf2a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:08.901775 env[1729]: 2024-07-02 07:58:08.870 [INFO][4095] k8s.go 387: Calico CNI using IPs: [192.168.49.129/32] ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.901775 env[1729]: 2024-07-02 07:58:08.870 [INFO][4095] dataplane_linux.go 68: Setting the host side veth name to cali3c716abaf2a ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.901775 env[1729]: 2024-07-02 07:58:08.880 [INFO][4095] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.901775 env[1729]: 2024-07-02 07:58:08.880 [INFO][4095] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"435db17a-f771-4cee-8299-f0d293960c11", ResourceVersion:"712", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379", Pod:"coredns-5dd5756b68-sbdzz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c716abaf2a", MAC:"6e:d0:e2:1d:31:17", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:08.901775 env[1729]: 2024-07-02 07:58:08.894 [INFO][4095] k8s.go 500: Wrote updated endpoint to datastore ContainerID="922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379" Namespace="kube-system" Pod="coredns-5dd5756b68-sbdzz" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:08.921566 env[1729]: time="2024-07-02T07:58:08.921453227Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:58:08.921828 env[1729]: time="2024-07-02T07:58:08.921794900Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:58:08.922091 env[1729]: time="2024-07-02T07:58:08.922060878Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:58:08.922697 env[1729]: time="2024-07-02T07:58:08.922633036Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379 pid=4129 runtime=io.containerd.runc.v2 Jul 2 07:58:08.933297 kernel: kauditd_printk_skb: 163 callbacks suppressed Jul 2 07:58:08.933416 kernel: audit: type=1325 audit(1719907088.923:1013): table=filter:103 family=2 entries=34 op=nft_register_chain pid=4133 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:08.933454 kernel: audit: type=1300 audit(1719907088.923:1013): arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7fffae84a780 a2=0 a3=7fffae84a76c items=0 ppid=3955 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:08.923000 audit[4133]: NETFILTER_CFG table=filter:103 family=2 entries=34 op=nft_register_chain pid=4133 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:08.923000 audit[4133]: SYSCALL arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7fffae84a780 a2=0 a3=7fffae84a76c items=0 ppid=3955 pid=4133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:08.923000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:08.944598 kernel: audit: type=1327 audit(1719907088.923:1013): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:08.972627 systemd[1]: Started cri-containerd-922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379.scope. Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.010806 kernel: audit: type=1400 audit(1719907089.002:1014): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.010949 kernel: audit: type=1400 audit(1719907089.002:1015): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.014219 kernel: audit: type=1400 audit(1719907089.002:1016): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.018219 kernel: audit: type=1400 audit(1719907089.002:1017): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.028941 kernel: audit: type=1400 audit(1719907089.002:1018): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.029060 kernel: audit: type=1400 audit(1719907089.002:1019): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.029096 kernel: audit: type=1400 audit(1719907089.002:1020): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.002000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit: BPF prog-id=149 op=LOAD Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4129 pid=4139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932323236306137386530633066326664333861633236633739396331 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4129 pid=4139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932323236306137386530633066326664333861633236633739396331 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.006000 audit: BPF prog-id=150 op=LOAD Jul 2 07:58:09.006000 audit[4139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003eaa40 items=0 ppid=4129 pid=4139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932323236306137386530633066326664333861633236633739396331 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit: BPF prog-id=151 op=LOAD Jul 2 07:58:09.009000 audit[4139]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003eaa88 items=0 ppid=4129 pid=4139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932323236306137386530633066326664333861633236633739396331 Jul 2 07:58:09.009000 audit: BPF prog-id=151 op=UNLOAD Jul 2 07:58:09.009000 audit: BPF prog-id=150 op=UNLOAD Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { perfmon } for pid=4139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit[4139]: AVC avc: denied { bpf } for pid=4139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.009000 audit: BPF prog-id=152 op=LOAD Jul 2 07:58:09.009000 audit[4139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003eae98 items=0 ppid=4129 pid=4139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.009000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932323236306137386530633066326664333861633236633739396331 Jul 2 07:58:09.062767 env[1729]: time="2024-07-02T07:58:09.062693454Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-sbdzz,Uid:435db17a-f771-4cee-8299-f0d293960c11,Namespace:kube-system,Attempt:1,} returns sandbox id \"922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379\"" Jul 2 07:58:09.066368 env[1729]: time="2024-07-02T07:58:09.066325274Z" level=info msg="CreateContainer within sandbox \"922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:58:09.091874 env[1729]: time="2024-07-02T07:58:09.091832738Z" level=info msg="CreateContainer within sandbox \"922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"4514b7d6de6679d86d067a3ec286d8138bb5d7ee281a6816ae62a6578e4a1f98\"" Jul 2 07:58:09.092869 env[1729]: time="2024-07-02T07:58:09.092835072Z" level=info msg="StartContainer for \"4514b7d6de6679d86d067a3ec286d8138bb5d7ee281a6816ae62a6578e4a1f98\"" Jul 2 07:58:09.131826 systemd[1]: Started cri-containerd-4514b7d6de6679d86d067a3ec286d8138bb5d7ee281a6816ae62a6578e4a1f98.scope. Jul 2 07:58:09.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.150000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.151000 audit: BPF prog-id=153 op=LOAD Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4129 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313462376436646536363739643836643036376133656332383664 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4129 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313462376436646536363739643836643036376133656332383664 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit: BPF prog-id=154 op=LOAD Jul 2 07:58:09.152000 audit[4173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00021f760 items=0 ppid=4129 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313462376436646536363739643836643036376133656332383664 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit: BPF prog-id=155 op=LOAD Jul 2 07:58:09.152000 audit[4173]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00021f7a8 items=0 ppid=4129 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313462376436646536363739643836643036376133656332383664 Jul 2 07:58:09.152000 audit: BPF prog-id=155 op=UNLOAD Jul 2 07:58:09.152000 audit: BPF prog-id=154 op=UNLOAD Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { perfmon } for pid=4173 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit[4173]: AVC avc: denied { bpf } for pid=4173 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.152000 audit: BPF prog-id=156 op=LOAD Jul 2 07:58:09.152000 audit[4173]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00021fbb8 items=0 ppid=4129 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435313462376436646536363739643836643036376133656332383664 Jul 2 07:58:09.176896 env[1729]: time="2024-07-02T07:58:09.176841909Z" level=info msg="StartContainer for \"4514b7d6de6679d86d067a3ec286d8138bb5d7ee281a6816ae62a6578e4a1f98\" returns successfully" Jul 2 07:58:09.251796 env[1729]: time="2024-07-02T07:58:09.251749801Z" level=info msg="StopPodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\"" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.320 [INFO][4212] k8s.go 608: Cleaning up netns ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.320 [INFO][4212] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" iface="eth0" netns="/var/run/netns/cni-663868e8-8f93-0609-ef1c-dc1fd8127300" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.322 [INFO][4212] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" iface="eth0" netns="/var/run/netns/cni-663868e8-8f93-0609-ef1c-dc1fd8127300" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.322 [INFO][4212] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" iface="eth0" netns="/var/run/netns/cni-663868e8-8f93-0609-ef1c-dc1fd8127300" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.322 [INFO][4212] k8s.go 615: Releasing IP address(es) ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.322 [INFO][4212] utils.go 188: Calico CNI releasing IP address ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.409 [INFO][4218] ipam_plugin.go 411: Releasing address using handleID ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.410 [INFO][4218] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.410 [INFO][4218] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.420 [WARNING][4218] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.420 [INFO][4218] ipam_plugin.go 439: Releasing address using workloadID ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.423 [INFO][4218] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:09.427978 env[1729]: 2024-07-02 07:58:09.425 [INFO][4212] k8s.go 621: Teardown processing complete. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:09.429102 env[1729]: time="2024-07-02T07:58:09.428132253Z" level=info msg="TearDown network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" successfully" Jul 2 07:58:09.429102 env[1729]: time="2024-07-02T07:58:09.428239024Z" level=info msg="StopPodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" returns successfully" Jul 2 07:58:09.429453 env[1729]: time="2024-07-02T07:58:09.429412333Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sq7vd,Uid:5f9d1ef0-c803-4c2a-a4d6-d10fc80db794,Namespace:calico-system,Attempt:1,}" Jul 2 07:58:09.522131 kubelet[2694]: I0702 07:58:09.521994 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-sbdzz" podStartSLOduration=34.521940018 podCreationTimestamp="2024-07-02 07:57:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:58:09.507864962 +0000 UTC m=+44.593415895" watchObservedRunningTime="2024-07-02 07:58:09.521940018 +0000 UTC m=+44.607490951" Jul 2 07:58:09.537000 audit[4244]: NETFILTER_CFG table=filter:104 family=2 entries=14 op=nft_register_rule pid=4244 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:09.537000 audit[4244]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd538e5720 a2=0 a3=7ffd538e570c items=0 ppid=2928 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.537000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:09.538000 audit[4244]: NETFILTER_CFG table=nat:105 family=2 entries=14 op=nft_register_rule pid=4244 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:09.538000 audit[4244]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffd538e5720 a2=0 a3=0 items=0 ppid=2928 pid=4244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.538000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:09.635086 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali255b46fc789: link becomes ready Jul 2 07:58:09.635781 systemd-networkd[1458]: cali255b46fc789: Link UP Jul 2 07:58:09.636038 systemd-networkd[1458]: cali255b46fc789: Gained carrier Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.501 [INFO][4226] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0 csi-node-driver- calico-system 5f9d1ef0-c803-4c2a-a4d6-d10fc80db794 721 0 2024-07-02 07:57:43 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7d7f6c786c k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-21-43 csi-node-driver-sq7vd eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali255b46fc789 [] []}} ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.501 [INFO][4226] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.562 [INFO][4239] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" HandleID="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.573 [INFO][4239] ipam_plugin.go 264: Auto assigning IP ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" HandleID="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000050f20), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-43", "pod":"csi-node-driver-sq7vd", "timestamp":"2024-07-02 07:58:09.562326228 +0000 UTC"}, Hostname:"ip-172-31-21-43", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.573 [INFO][4239] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.573 [INFO][4239] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.573 [INFO][4239] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-43' Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.576 [INFO][4239] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.583 [INFO][4239] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.592 [INFO][4239] ipam.go 489: Trying affinity for 192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.595 [INFO][4239] ipam.go 155: Attempting to load block cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.598 [INFO][4239] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.599 [INFO][4239] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.49.128/26 handle="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.601 [INFO][4239] ipam.go 1685: Creating new handle: k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8 Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.607 [INFO][4239] ipam.go 1203: Writing block in order to claim IPs block=192.168.49.128/26 handle="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.627 [INFO][4239] ipam.go 1216: Successfully claimed IPs: [192.168.49.130/26] block=192.168.49.128/26 handle="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.627 [INFO][4239] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.49.130/26] handle="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" host="ip-172-31-21-43" Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.627 [INFO][4239] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:09.660354 env[1729]: 2024-07-02 07:58:09.627 [INFO][4239] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.49.130/26] IPv6=[] ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" HandleID="k8s-pod-network.e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.661871 env[1729]: 2024-07-02 07:58:09.630 [INFO][4226] k8s.go 386: Populated endpoint ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794", ResourceVersion:"721", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"", Pod:"csi-node-driver-sq7vd", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.49.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali255b46fc789", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:09.661871 env[1729]: 2024-07-02 07:58:09.630 [INFO][4226] k8s.go 387: Calico CNI using IPs: [192.168.49.130/32] ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.661871 env[1729]: 2024-07-02 07:58:09.630 [INFO][4226] dataplane_linux.go 68: Setting the host side veth name to cali255b46fc789 ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.661871 env[1729]: 2024-07-02 07:58:09.634 [INFO][4226] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.661871 env[1729]: 2024-07-02 07:58:09.637 [INFO][4226] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794", ResourceVersion:"721", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8", Pod:"csi-node-driver-sq7vd", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.49.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali255b46fc789", MAC:"0a:5e:ee:36:92:da", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:09.661871 env[1729]: 2024-07-02 07:58:09.656 [INFO][4226] k8s.go 500: Wrote updated endpoint to datastore ContainerID="e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8" Namespace="calico-system" Pod="csi-node-driver-sq7vd" WorkloadEndpoint="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:09.697649 env[1729]: time="2024-07-02T07:58:09.697377512Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:58:09.697649 env[1729]: time="2024-07-02T07:58:09.697434996Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:58:09.697649 env[1729]: time="2024-07-02T07:58:09.697454081Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:58:09.698212 env[1729]: time="2024-07-02T07:58:09.698120035Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8 pid=4269 runtime=io.containerd.runc.v2 Jul 2 07:58:09.704675 systemd[1]: run-containerd-runc-k8s.io-922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379-runc.9AxSM2.mount: Deactivated successfully. Jul 2 07:58:09.706927 systemd[1]: run-netns-cni\x2d663868e8\x2d8f93\x2d0609\x2def1c\x2ddc1fd8127300.mount: Deactivated successfully. Jul 2 07:58:09.756551 systemd[1]: run-containerd-runc-k8s.io-e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8-runc.tbEE1k.mount: Deactivated successfully. Jul 2 07:58:09.763150 systemd[1]: Started cri-containerd-e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8.scope. Jul 2 07:58:09.767000 audit[4287]: NETFILTER_CFG table=filter:106 family=2 entries=38 op=nft_register_chain pid=4287 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:09.767000 audit[4287]: SYSCALL arch=c000003e syscall=46 success=yes exit=20336 a0=3 a1=7ffd73fbf230 a2=0 a3=7ffd73fbf21c items=0 ppid=3955 pid=4287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.767000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.783000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.784000 audit: BPF prog-id=157 op=LOAD Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4269 pid=4278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323365313632653263653932666639663865326531653634623334 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4269 pid=4278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323365313632653263653932666639663865326531653634623334 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.786000 audit: BPF prog-id=158 op=LOAD Jul 2 07:58:09.786000 audit[4278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000205250 items=0 ppid=4269 pid=4278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323365313632653263653932666639663865326531653634623334 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit: BPF prog-id=159 op=LOAD Jul 2 07:58:09.787000 audit[4278]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000205298 items=0 ppid=4269 pid=4278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323365313632653263653932666639663865326531653634623334 Jul 2 07:58:09.787000 audit: BPF prog-id=159 op=UNLOAD Jul 2 07:58:09.787000 audit: BPF prog-id=158 op=UNLOAD Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { perfmon } for pid=4278 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit[4278]: AVC avc: denied { bpf } for pid=4278 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:09.787000 audit: BPF prog-id=160 op=LOAD Jul 2 07:58:09.787000 audit[4278]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002056a8 items=0 ppid=4269 pid=4278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:09.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323365313632653263653932666639663865326531653634623334 Jul 2 07:58:09.805431 env[1729]: time="2024-07-02T07:58:09.805386829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sq7vd,Uid:5f9d1ef0-c803-4c2a-a4d6-d10fc80db794,Namespace:calico-system,Attempt:1,} returns sandbox id \"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8\"" Jul 2 07:58:09.811182 env[1729]: time="2024-07-02T07:58:09.811149115Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 07:58:10.453809 systemd-networkd[1458]: cali3c716abaf2a: Gained IPv6LL Jul 2 07:58:10.581000 audit[4307]: NETFILTER_CFG table=filter:107 family=2 entries=11 op=nft_register_rule pid=4307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:10.581000 audit[4307]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcd7a026b0 a2=0 a3=7ffcd7a0269c items=0 ppid=2928 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:10.581000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:10.583000 audit[4307]: NETFILTER_CFG table=nat:108 family=2 entries=35 op=nft_register_chain pid=4307 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:10.583000 audit[4307]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffcd7a026b0 a2=0 a3=7ffcd7a0269c items=0 ppid=2928 pid=4307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:10.583000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:10.901522 systemd-networkd[1458]: cali255b46fc789: Gained IPv6LL Jul 2 07:58:11.068819 env[1729]: time="2024-07-02T07:58:11.068768399Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:11.072165 env[1729]: time="2024-07-02T07:58:11.072123233Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:11.074667 env[1729]: time="2024-07-02T07:58:11.074627254Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:11.077120 env[1729]: time="2024-07-02T07:58:11.077063007Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:11.077671 env[1729]: time="2024-07-02T07:58:11.077634692Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de\"" Jul 2 07:58:11.082781 env[1729]: time="2024-07-02T07:58:11.082737895Z" level=info msg="CreateContainer within sandbox \"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 07:58:11.108014 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2336514118.mount: Deactivated successfully. Jul 2 07:58:11.113362 env[1729]: time="2024-07-02T07:58:11.113310959Z" level=info msg="CreateContainer within sandbox \"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"8674357a408cce5bd4af5a075263990f09e016633f4d331deb25ca89af124d71\"" Jul 2 07:58:11.114724 env[1729]: time="2024-07-02T07:58:11.114687947Z" level=info msg="StartContainer for \"8674357a408cce5bd4af5a075263990f09e016633f4d331deb25ca89af124d71\"" Jul 2 07:58:11.153380 systemd[1]: Started cri-containerd-8674357a408cce5bd4af5a075263990f09e016633f4d331deb25ca89af124d71.scope. Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fc28af682f8 items=0 ppid=4269 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373433353761343038636365356264346166356130373532363339 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit: BPF prog-id=161 op=LOAD Jul 2 07:58:11.179000 audit[4318]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000024df8 items=0 ppid=4269 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373433353761343038636365356264346166356130373532363339 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit: BPF prog-id=162 op=LOAD Jul 2 07:58:11.179000 audit[4318]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000024e48 items=0 ppid=4269 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373433353761343038636365356264346166356130373532363339 Jul 2 07:58:11.179000 audit: BPF prog-id=162 op=UNLOAD Jul 2 07:58:11.179000 audit: BPF prog-id=161 op=UNLOAD Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { perfmon } for pid=4318 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit[4318]: AVC avc: denied { bpf } for pid=4318 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.179000 audit: BPF prog-id=163 op=LOAD Jul 2 07:58:11.179000 audit[4318]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000024ed8 items=0 ppid=4269 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.179000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836373433353761343038636365356264346166356130373532363339 Jul 2 07:58:11.200290 env[1729]: time="2024-07-02T07:58:11.200174680Z" level=info msg="StartContainer for \"8674357a408cce5bd4af5a075263990f09e016633f4d331deb25ca89af124d71\" returns successfully" Jul 2 07:58:11.202365 env[1729]: time="2024-07-02T07:58:11.202318461Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 07:58:11.251822 env[1729]: time="2024-07-02T07:58:11.251773667Z" level=info msg="StopPodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\"" Jul 2 07:58:11.253204 env[1729]: time="2024-07-02T07:58:11.253163802Z" level=info msg="StopPodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\"" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.350 [INFO][4376] k8s.go 608: Cleaning up netns ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.351 [INFO][4376] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" iface="eth0" netns="/var/run/netns/cni-4609afa3-280e-e6a6-f739-ba1190a663f0" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.351 [INFO][4376] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" iface="eth0" netns="/var/run/netns/cni-4609afa3-280e-e6a6-f739-ba1190a663f0" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.351 [INFO][4376] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" iface="eth0" netns="/var/run/netns/cni-4609afa3-280e-e6a6-f739-ba1190a663f0" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.351 [INFO][4376] k8s.go 615: Releasing IP address(es) ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.351 [INFO][4376] utils.go 188: Calico CNI releasing IP address ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.400 [INFO][4387] ipam_plugin.go 411: Releasing address using handleID ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.401 [INFO][4387] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.401 [INFO][4387] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.418 [WARNING][4387] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.418 [INFO][4387] ipam_plugin.go 439: Releasing address using workloadID ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.420 [INFO][4387] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:11.429604 env[1729]: 2024-07-02 07:58:11.422 [INFO][4376] k8s.go 621: Teardown processing complete. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:11.429604 env[1729]: time="2024-07-02T07:58:11.427740496Z" level=info msg="TearDown network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" successfully" Jul 2 07:58:11.429604 env[1729]: time="2024-07-02T07:58:11.427784008Z" level=info msg="StopPodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" returns successfully" Jul 2 07:58:11.429604 env[1729]: time="2024-07-02T07:58:11.428596541Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-wc4nr,Uid:de8ff49c-6fb7-45da-90fe-6833a98bffc8,Namespace:kube-system,Attempt:1,}" Jul 2 07:58:11.430739 systemd[1]: run-netns-cni\x2d4609afa3\x2d280e\x2de6a6\x2df739\x2dba1190a663f0.mount: Deactivated successfully. Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.369 [INFO][4375] k8s.go 608: Cleaning up netns ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.369 [INFO][4375] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" iface="eth0" netns="/var/run/netns/cni-868dc799-3e0b-2fe9-c674-442d3fe68a19" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.370 [INFO][4375] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" iface="eth0" netns="/var/run/netns/cni-868dc799-3e0b-2fe9-c674-442d3fe68a19" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.370 [INFO][4375] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" iface="eth0" netns="/var/run/netns/cni-868dc799-3e0b-2fe9-c674-442d3fe68a19" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.370 [INFO][4375] k8s.go 615: Releasing IP address(es) ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.370 [INFO][4375] utils.go 188: Calico CNI releasing IP address ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.415 [INFO][4392] ipam_plugin.go 411: Releasing address using handleID ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.415 [INFO][4392] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.420 [INFO][4392] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.440 [WARNING][4392] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.440 [INFO][4392] ipam_plugin.go 439: Releasing address using workloadID ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.443 [INFO][4392] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:11.448377 env[1729]: 2024-07-02 07:58:11.445 [INFO][4375] k8s.go 621: Teardown processing complete. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:11.449217 env[1729]: time="2024-07-02T07:58:11.449175992Z" level=info msg="TearDown network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" successfully" Jul 2 07:58:11.449755 env[1729]: time="2024-07-02T07:58:11.449314256Z" level=info msg="StopPodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" returns successfully" Jul 2 07:58:11.450185 env[1729]: time="2024-07-02T07:58:11.450154795Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78794c487b-k5d6t,Uid:dc5b3d02-77da-4eaa-954b-c4949cdbede2,Namespace:calico-system,Attempt:1,}" Jul 2 07:58:11.668413 systemd-networkd[1458]: calice716c8d827: Link UP Jul 2 07:58:11.671543 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:58:11.671669 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calice716c8d827: link becomes ready Jul 2 07:58:11.672045 systemd-networkd[1458]: calice716c8d827: Gained carrier Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.517 [INFO][4400] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0 coredns-5dd5756b68- kube-system de8ff49c-6fb7-45da-90fe-6833a98bffc8 745 0 2024-07-02 07:57:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-21-43 coredns-5dd5756b68-wc4nr eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calice716c8d827 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.517 [INFO][4400] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.599 [INFO][4425] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" HandleID="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.609 [INFO][4425] ipam_plugin.go 264: Auto assigning IP ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" HandleID="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002863c0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-21-43", "pod":"coredns-5dd5756b68-wc4nr", "timestamp":"2024-07-02 07:58:11.599344179 +0000 UTC"}, Hostname:"ip-172-31-21-43", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.610 [INFO][4425] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.610 [INFO][4425] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.610 [INFO][4425] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-43' Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.612 [INFO][4425] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.618 [INFO][4425] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.628 [INFO][4425] ipam.go 489: Trying affinity for 192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.631 [INFO][4425] ipam.go 155: Attempting to load block cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.635 [INFO][4425] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.635 [INFO][4425] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.49.128/26 handle="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.645 [INFO][4425] ipam.go 1685: Creating new handle: k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1 Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.653 [INFO][4425] ipam.go 1203: Writing block in order to claim IPs block=192.168.49.128/26 handle="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.661 [INFO][4425] ipam.go 1216: Successfully claimed IPs: [192.168.49.131/26] block=192.168.49.128/26 handle="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.661 [INFO][4425] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.49.131/26] handle="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" host="ip-172-31-21-43" Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.661 [INFO][4425] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:11.704991 env[1729]: 2024-07-02 07:58:11.661 [INFO][4425] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.49.131/26] IPv6=[] ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" HandleID="k8s-pod-network.1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.706408 env[1729]: 2024-07-02 07:58:11.665 [INFO][4400] k8s.go 386: Populated endpoint ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"de8ff49c-6fb7-45da-90fe-6833a98bffc8", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"", Pod:"coredns-5dd5756b68-wc4nr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calice716c8d827", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:11.706408 env[1729]: 2024-07-02 07:58:11.665 [INFO][4400] k8s.go 387: Calico CNI using IPs: [192.168.49.131/32] ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.706408 env[1729]: 2024-07-02 07:58:11.665 [INFO][4400] dataplane_linux.go 68: Setting the host side veth name to calice716c8d827 ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.706408 env[1729]: 2024-07-02 07:58:11.672 [INFO][4400] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.706408 env[1729]: 2024-07-02 07:58:11.673 [INFO][4400] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"de8ff49c-6fb7-45da-90fe-6833a98bffc8", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1", Pod:"coredns-5dd5756b68-wc4nr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calice716c8d827", MAC:"6a:78:67:eb:68:fb", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:11.706408 env[1729]: 2024-07-02 07:58:11.699 [INFO][4400] k8s.go 500: Wrote updated endpoint to datastore ContainerID="1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1" Namespace="kube-system" Pod="coredns-5dd5756b68-wc4nr" WorkloadEndpoint="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:11.754009 env[1729]: time="2024-07-02T07:58:11.753910509Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:58:11.754570 env[1729]: time="2024-07-02T07:58:11.754516604Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:58:11.754838 env[1729]: time="2024-07-02T07:58:11.754807884Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:58:11.755173 env[1729]: time="2024-07-02T07:58:11.755138521Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1 pid=4460 runtime=io.containerd.runc.v2 Jul 2 07:58:11.767386 systemd-networkd[1458]: cali9ec2584604a: Link UP Jul 2 07:58:11.795461 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9ec2584604a: link becomes ready Jul 2 07:58:11.794725 systemd-networkd[1458]: cali9ec2584604a: Gained carrier Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.562 [INFO][4411] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0 calico-kube-controllers-78794c487b- calico-system dc5b3d02-77da-4eaa-954b-c4949cdbede2 746 0 2024-07-02 07:57:43 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:78794c487b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-21-43 calico-kube-controllers-78794c487b-k5d6t eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali9ec2584604a [] []}} ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.562 [INFO][4411] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.622 [INFO][4432] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" HandleID="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.646 [INFO][4432] ipam_plugin.go 264: Auto assigning IP ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" HandleID="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00026fb70), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-43", "pod":"calico-kube-controllers-78794c487b-k5d6t", "timestamp":"2024-07-02 07:58:11.622345169 +0000 UTC"}, Hostname:"ip-172-31-21-43", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.646 [INFO][4432] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.661 [INFO][4432] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.661 [INFO][4432] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-43' Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.676 [INFO][4432] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.696 [INFO][4432] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.712 [INFO][4432] ipam.go 489: Trying affinity for 192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.726 [INFO][4432] ipam.go 155: Attempting to load block cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.731 [INFO][4432] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.732 [INFO][4432] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.49.128/26 handle="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.738 [INFO][4432] ipam.go 1685: Creating new handle: k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.747 [INFO][4432] ipam.go 1203: Writing block in order to claim IPs block=192.168.49.128/26 handle="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.758 [INFO][4432] ipam.go 1216: Successfully claimed IPs: [192.168.49.132/26] block=192.168.49.128/26 handle="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.759 [INFO][4432] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.49.132/26] handle="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" host="ip-172-31-21-43" Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.759 [INFO][4432] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:11.802263 env[1729]: 2024-07-02 07:58:11.759 [INFO][4432] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.49.132/26] IPv6=[] ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" HandleID="k8s-pod-network.17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.803127 env[1729]: 2024-07-02 07:58:11.763 [INFO][4411] k8s.go 386: Populated endpoint ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0", GenerateName:"calico-kube-controllers-78794c487b-", Namespace:"calico-system", SelfLink:"", UID:"dc5b3d02-77da-4eaa-954b-c4949cdbede2", ResourceVersion:"746", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78794c487b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"", Pod:"calico-kube-controllers-78794c487b-k5d6t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9ec2584604a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:11.803127 env[1729]: 2024-07-02 07:58:11.763 [INFO][4411] k8s.go 387: Calico CNI using IPs: [192.168.49.132/32] ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.803127 env[1729]: 2024-07-02 07:58:11.763 [INFO][4411] dataplane_linux.go 68: Setting the host side veth name to cali9ec2584604a ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.803127 env[1729]: 2024-07-02 07:58:11.768 [INFO][4411] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.803127 env[1729]: 2024-07-02 07:58:11.769 [INFO][4411] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0", GenerateName:"calico-kube-controllers-78794c487b-", Namespace:"calico-system", SelfLink:"", UID:"dc5b3d02-77da-4eaa-954b-c4949cdbede2", ResourceVersion:"746", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78794c487b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf", Pod:"calico-kube-controllers-78794c487b-k5d6t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9ec2584604a", MAC:"ca:c1:a9:ab:23:cc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:11.803127 env[1729]: 2024-07-02 07:58:11.785 [INFO][4411] k8s.go 500: Wrote updated endpoint to datastore ContainerID="17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf" Namespace="calico-system" Pod="calico-kube-controllers-78794c487b-k5d6t" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:11.815628 systemd[1]: Started cri-containerd-1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1.scope. Jul 2 07:58:11.832000 audit[4490]: NETFILTER_CFG table=filter:109 family=2 entries=34 op=nft_register_chain pid=4490 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:11.832000 audit[4490]: SYSCALL arch=c000003e syscall=46 success=yes exit=18220 a0=3 a1=7fff03b47740 a2=0 a3=7fff03b4772c items=0 ppid=3955 pid=4490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.832000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.842000 audit: BPF prog-id=164 op=LOAD Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4460 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353635333766613639333630386430353236653161663834323265 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4460 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353635333766613639333630386430353236653161663834323265 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.844000 audit: BPF prog-id=165 op=LOAD Jul 2 07:58:11.844000 audit[4470]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003485e0 items=0 ppid=4460 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353635333766613639333630386430353236653161663834323265 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.845000 audit: BPF prog-id=166 op=LOAD Jul 2 07:58:11.845000 audit[4470]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000348628 items=0 ppid=4460 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353635333766613639333630386430353236653161663834323265 Jul 2 07:58:11.846000 audit: BPF prog-id=166 op=UNLOAD Jul 2 07:58:11.846000 audit: BPF prog-id=165 op=UNLOAD Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { perfmon } for pid=4470 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit[4470]: AVC avc: denied { bpf } for pid=4470 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.847000 audit: BPF prog-id=167 op=LOAD Jul 2 07:58:11.847000 audit[4470]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000348a38 items=0 ppid=4460 pid=4470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.847000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353635333766613639333630386430353236653161663834323265 Jul 2 07:58:11.858750 env[1729]: time="2024-07-02T07:58:11.858628548Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:58:11.858911 env[1729]: time="2024-07-02T07:58:11.858773321Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:58:11.858911 env[1729]: time="2024-07-02T07:58:11.858807705Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:58:11.859153 env[1729]: time="2024-07-02T07:58:11.859084366Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf pid=4508 runtime=io.containerd.runc.v2 Jul 2 07:58:11.869000 audit[4509]: NETFILTER_CFG table=filter:110 family=2 entries=42 op=nft_register_chain pid=4509 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:58:11.869000 audit[4509]: SYSCALL arch=c000003e syscall=46 success=yes exit=21016 a0=3 a1=7ffca8244770 a2=0 a3=7ffca824475c items=0 ppid=3955 pid=4509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.869000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:58:11.884868 systemd[1]: Started cri-containerd-17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf.scope. Jul 2 07:58:11.917111 env[1729]: time="2024-07-02T07:58:11.917063330Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-wc4nr,Uid:de8ff49c-6fb7-45da-90fe-6833a98bffc8,Namespace:kube-system,Attempt:1,} returns sandbox id \"1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1\"" Jul 2 07:58:11.929028 env[1729]: time="2024-07-02T07:58:11.928980834Z" level=info msg="CreateContainer within sandbox \"1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.937000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.938000 audit: BPF prog-id=168 op=LOAD Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4508 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633933316164363765363332376439386336353766316133666436 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4508 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633933316164363765363332376439386336353766316133666436 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.939000 audit: BPF prog-id=169 op=LOAD Jul 2 07:58:11.939000 audit[4517]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00030cfc0 items=0 ppid=4508 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633933316164363765363332376439386336353766316133666436 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.940000 audit: BPF prog-id=170 op=LOAD Jul 2 07:58:11.940000 audit[4517]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00030d008 items=0 ppid=4508 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633933316164363765363332376439386336353766316133666436 Jul 2 07:58:11.941000 audit: BPF prog-id=170 op=UNLOAD Jul 2 07:58:11.941000 audit: BPF prog-id=169 op=UNLOAD Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { perfmon } for pid=4517 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit[4517]: AVC avc: denied { bpf } for pid=4517 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:11.941000 audit: BPF prog-id=171 op=LOAD Jul 2 07:58:11.941000 audit[4517]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00030d418 items=0 ppid=4508 pid=4517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:11.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137633933316164363765363332376439386336353766316133666436 Jul 2 07:58:11.966824 env[1729]: time="2024-07-02T07:58:11.966686295Z" level=info msg="CreateContainer within sandbox \"1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"88745719054b10c1180a1e92a16ff6ae7a927e131b55434011dd6fd04e2d61d2\"" Jul 2 07:58:11.974344 env[1729]: time="2024-07-02T07:58:11.974306205Z" level=info msg="StartContainer for \"88745719054b10c1180a1e92a16ff6ae7a927e131b55434011dd6fd04e2d61d2\"" Jul 2 07:58:11.992115 env[1729]: time="2024-07-02T07:58:11.992062390Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-78794c487b-k5d6t,Uid:dc5b3d02-77da-4eaa-954b-c4949cdbede2,Namespace:calico-system,Attempt:1,} returns sandbox id \"17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf\"" Jul 2 07:58:12.012986 systemd[1]: Started cri-containerd-88745719054b10c1180a1e92a16ff6ae7a927e131b55434011dd6fd04e2d61d2.scope. Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.044000 audit: BPF prog-id=172 op=LOAD Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4460 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838373435373139303534623130633131383061316539326131366666 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4460 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838373435373139303534623130633131383061316539326131366666 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit: BPF prog-id=173 op=LOAD Jul 2 07:58:12.045000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001873b0 items=0 ppid=4460 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838373435373139303534623130633131383061316539326131366666 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit: BPF prog-id=174 op=LOAD Jul 2 07:58:12.045000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001873f8 items=0 ppid=4460 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838373435373139303534623130633131383061316539326131366666 Jul 2 07:58:12.045000 audit: BPF prog-id=174 op=UNLOAD Jul 2 07:58:12.045000 audit: BPF prog-id=173 op=UNLOAD Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { perfmon } for pid=4554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit[4554]: AVC avc: denied { bpf } for pid=4554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.045000 audit: BPF prog-id=175 op=LOAD Jul 2 07:58:12.045000 audit[4554]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000187808 items=0 ppid=4460 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838373435373139303534623130633131383061316539326131366666 Jul 2 07:58:12.065272 env[1729]: time="2024-07-02T07:58:12.064789993Z" level=info msg="StartContainer for \"88745719054b10c1180a1e92a16ff6ae7a927e131b55434011dd6fd04e2d61d2\" returns successfully" Jul 2 07:58:12.111349 systemd[1]: run-netns-cni\x2d868dc799\x2d3e0b\x2d2fe9\x2dc674\x2d442d3fe68a19.mount: Deactivated successfully. Jul 2 07:58:12.592988 kubelet[2694]: I0702 07:58:12.592958 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-wc4nr" podStartSLOduration=37.592838951 podCreationTimestamp="2024-07-02 07:57:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:58:12.592346127 +0000 UTC m=+47.677897051" watchObservedRunningTime="2024-07-02 07:58:12.592838951 +0000 UTC m=+47.678389884" Jul 2 07:58:12.670000 audit[4590]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=4590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:12.670000 audit[4590]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffd30df31c0 a2=0 a3=7ffd30df31ac items=0 ppid=2928 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:12.672000 audit[4590]: NETFILTER_CFG table=nat:112 family=2 entries=44 op=nft_register_rule pid=4590 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:12.672000 audit[4590]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd30df31c0 a2=0 a3=7ffd30df31ac items=0 ppid=2928 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.672000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:12.706000 audit[4592]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=4592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:12.706000 audit[4592]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcf9cd5fc0 a2=0 a3=7ffcf9cd5fac items=0 ppid=2928 pid=4592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.706000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:12.722000 audit[4592]: NETFILTER_CFG table=nat:114 family=2 entries=56 op=nft_register_chain pid=4592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:58:12.722000 audit[4592]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffcf9cd5fc0 a2=0 a3=7ffcf9cd5fac items=0 ppid=2928 pid=4592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.722000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:58:12.811157 env[1729]: time="2024-07-02T07:58:12.811104020Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:12.814841 env[1729]: time="2024-07-02T07:58:12.814795300Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:12.817654 env[1729]: time="2024-07-02T07:58:12.817612561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:12.819980 env[1729]: time="2024-07-02T07:58:12.819935762Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:12.820744 env[1729]: time="2024-07-02T07:58:12.820617140Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020\"" Jul 2 07:58:12.822725 env[1729]: time="2024-07-02T07:58:12.822692805Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 07:58:12.824295 env[1729]: time="2024-07-02T07:58:12.824255324Z" level=info msg="CreateContainer within sandbox \"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 07:58:12.848498 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount209118769.mount: Deactivated successfully. Jul 2 07:58:12.859121 env[1729]: time="2024-07-02T07:58:12.859071234Z" level=info msg="CreateContainer within sandbox \"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"b598f669e801cc994ee57112580b74960054d78da71542d440c9c1e0190203ae\"" Jul 2 07:58:12.861869 env[1729]: time="2024-07-02T07:58:12.861122341Z" level=info msg="StartContainer for \"b598f669e801cc994ee57112580b74960054d78da71542d440c9c1e0190203ae\"" Jul 2 07:58:12.920273 systemd[1]: Started cri-containerd-b598f669e801cc994ee57112580b74960054d78da71542d440c9c1e0190203ae.scope. Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f42d420fa88 items=0 ppid=4269 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393866363639653830316363393934656535373131323538306237 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit: BPF prog-id=176 op=LOAD Jul 2 07:58:12.945000 audit[4602]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000292888 items=0 ppid=4269 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393866363639653830316363393934656535373131323538306237 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit: BPF prog-id=177 op=LOAD Jul 2 07:58:12.945000 audit[4602]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002928d8 items=0 ppid=4269 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393866363639653830316363393934656535373131323538306237 Jul 2 07:58:12.945000 audit: BPF prog-id=177 op=UNLOAD Jul 2 07:58:12.945000 audit: BPF prog-id=176 op=UNLOAD Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:12.945000 audit: BPF prog-id=178 op=LOAD Jul 2 07:58:12.945000 audit[4602]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000292968 items=0 ppid=4269 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:12.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235393866363639653830316363393934656535373131323538306237 Jul 2 07:58:12.967668 env[1729]: time="2024-07-02T07:58:12.967615956Z" level=info msg="StartContainer for \"b598f669e801cc994ee57112580b74960054d78da71542d440c9c1e0190203ae\" returns successfully" Jul 2 07:58:13.076918 systemd-networkd[1458]: calice716c8d827: Gained IPv6LL Jul 2 07:58:13.104185 systemd[1]: run-containerd-runc-k8s.io-b598f669e801cc994ee57112580b74960054d78da71542d440c9c1e0190203ae-runc.SyTHpU.mount: Deactivated successfully. Jul 2 07:58:13.396746 systemd-networkd[1458]: cali9ec2584604a: Gained IPv6LL Jul 2 07:58:13.528301 kubelet[2694]: I0702 07:58:13.528020 2694 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 07:58:13.528301 kubelet[2694]: I0702 07:58:13.528066 2694 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 07:58:15.897340 env[1729]: time="2024-07-02T07:58:15.897295755Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:15.904490 env[1729]: time="2024-07-02T07:58:15.904448311Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:15.908335 env[1729]: time="2024-07-02T07:58:15.908295867Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:15.912035 env[1729]: time="2024-07-02T07:58:15.911995282Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:58:15.914361 env[1729]: time="2024-07-02T07:58:15.913352135Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783\"" Jul 2 07:58:15.950403 env[1729]: time="2024-07-02T07:58:15.950358634Z" level=info msg="CreateContainer within sandbox \"17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 07:58:15.975792 env[1729]: time="2024-07-02T07:58:15.975735243Z" level=info msg="CreateContainer within sandbox \"17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2\"" Jul 2 07:58:15.976631 env[1729]: time="2024-07-02T07:58:15.976527374Z" level=info msg="StartContainer for \"05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2\"" Jul 2 07:58:16.019293 systemd[1]: Started cri-containerd-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2.scope. Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.074089 kernel: kauditd_printk_skb: 454 callbacks suppressed Jul 2 07:58:16.074191 kernel: audit: type=1400 audit(1719907096.071:1145): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.081768 kernel: audit: type=1400 audit(1719907096.071:1146): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.087748 kernel: audit: type=1400 audit(1719907096.071:1147): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.091552 kernel: audit: type=1400 audit(1719907096.071:1148): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.096600 kernel: audit: type=1400 audit(1719907096.071:1149): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.096725 kernel: audit: type=1400 audit(1719907096.071:1150): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.104466 kernel: audit: type=1400 audit(1719907096.071:1151): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.113912 kernel: audit: type=1400 audit(1719907096.071:1152): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.114039 kernel: audit: type=1400 audit(1719907096.071:1153): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.124654 kernel: audit: type=1400 audit(1719907096.072:1154): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.072000 audit: BPF prog-id=179 op=LOAD Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4508 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:16.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035653665336238626531313938323231663536313761653131396435 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4508 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:16.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035653665336238626531313938323231663536313761653131396435 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit: BPF prog-id=180 op=LOAD Jul 2 07:58:16.082000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a3940 items=0 ppid=4508 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:16.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035653665336238626531313938323231663536313761653131396435 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit: BPF prog-id=181 op=LOAD Jul 2 07:58:16.082000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a3988 items=0 ppid=4508 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:16.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035653665336238626531313938323231663536313761653131396435 Jul 2 07:58:16.082000 audit: BPF prog-id=181 op=UNLOAD Jul 2 07:58:16.082000 audit: BPF prog-id=180 op=UNLOAD Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { perfmon } for pid=4643 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit[4643]: AVC avc: denied { bpf } for pid=4643 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:58:16.082000 audit: BPF prog-id=182 op=LOAD Jul 2 07:58:16.082000 audit[4643]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a3d98 items=0 ppid=4508 pid=4643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:16.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035653665336238626531313938323231663536313761653131396435 Jul 2 07:58:16.181873 env[1729]: time="2024-07-02T07:58:16.181731099Z" level=info msg="StartContainer for \"05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2\" returns successfully" Jul 2 07:58:16.592737 kubelet[2694]: I0702 07:58:16.592459 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-sq7vd" podStartSLOduration=30.578064418 podCreationTimestamp="2024-07-02 07:57:43 +0000 UTC" firstStartedPulling="2024-07-02 07:58:09.807021103 +0000 UTC m=+44.892572012" lastFinishedPulling="2024-07-02 07:58:12.821359744 +0000 UTC m=+47.906910670" observedRunningTime="2024-07-02 07:58:13.557365576 +0000 UTC m=+48.642916509" watchObservedRunningTime="2024-07-02 07:58:16.592403076 +0000 UTC m=+51.677954009" Jul 2 07:58:16.668938 systemd[1]: Started sshd@7-172.31.21.43:22-139.178.89.65:37988.service. Jul 2 07:58:16.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.43:22-139.178.89.65:37988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:16.767407 kubelet[2694]: I0702 07:58:16.767361 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-78794c487b-k5d6t" podStartSLOduration=29.847769727 podCreationTimestamp="2024-07-02 07:57:43 +0000 UTC" firstStartedPulling="2024-07-02 07:58:11.995249753 +0000 UTC m=+47.080800668" lastFinishedPulling="2024-07-02 07:58:15.914791914 +0000 UTC m=+51.000342840" observedRunningTime="2024-07-02 07:58:16.596473339 +0000 UTC m=+51.682024300" watchObservedRunningTime="2024-07-02 07:58:16.767311899 +0000 UTC m=+51.852862832" Jul 2 07:58:16.937282 systemd[1]: run-containerd-runc-k8s.io-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2-runc.0JTLR2.mount: Deactivated successfully. Jul 2 07:58:16.939382 sshd[4691]: Accepted publickey for core from 139.178.89.65 port 37988 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:16.936000 audit[4691]: USER_ACCT pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:16.938000 audit[4691]: CRED_ACQ pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:16.938000 audit[4691]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf20ef380 a2=3 a3=0 items=0 ppid=1 pid=4691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:16.938000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:16.943048 sshd[4691]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:16.964009 systemd-logind[1723]: New session 8 of user core. Jul 2 07:58:16.966987 systemd[1]: Started session-8.scope. Jul 2 07:58:16.975000 audit[4691]: USER_START pid=4691 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:16.978000 audit[4700]: CRED_ACQ pid=4700 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:17.728550 amazon-ssm-agent[1711]: 2024-07-02 07:58:17 INFO [HealthCheck] HealthCheck reporting agent health. Jul 2 07:58:17.938000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:17.939000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:17.939000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0029cacc0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:17.939000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:58:17.938000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00257ed20 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:17.938000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:58:18.105820 sshd[4691]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:18.107000 audit[4691]: USER_END pid=4691 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:18.107000 audit[4691]: CRED_DISP pid=4691 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:18.112130 systemd[1]: sshd@7-172.31.21.43:22-139.178.89.65:37988.service: Deactivated successfully. Jul 2 07:58:18.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.43:22-139.178.89.65:37988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:18.113628 systemd-logind[1723]: Session 8 logged out. Waiting for processes to exit. Jul 2 07:58:18.114331 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 07:58:18.115901 systemd-logind[1723]: Removed session 8. Jul 2 07:58:19.515000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:19.515000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:19.515000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c009959500 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:58:19.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:58:19.515000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00ca3a5d0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:58:19.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:58:19.516000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:19.516000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00ff9a2c0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:58:19.516000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:58:19.531000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:19.531000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00ff9a680 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:58:19.531000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:58:19.533000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:19.533000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00ca3b140 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:58:19.533000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:58:19.538000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:19.538000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c009959d10 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:58:19.538000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:58:23.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.43:22-139.178.89.65:41594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:23.134212 systemd[1]: Started sshd@8-172.31.21.43:22-139.178.89.65:41594.service. Jul 2 07:58:23.136125 kernel: kauditd_printk_skb: 82 callbacks suppressed Jul 2 07:58:23.136299 kernel: audit: type=1130 audit(1719907103.133:1180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.43:22-139.178.89.65:41594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:23.315000 audit[4726]: USER_ACCT pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.321382 sshd[4726]: Accepted publickey for core from 139.178.89.65 port 41594 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:23.329703 kernel: audit: type=1101 audit(1719907103.315:1181): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.330000 audit[4726]: CRED_ACQ pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.333067 sshd[4726]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:23.345518 kernel: audit: type=1103 audit(1719907103.330:1182): pid=4726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.345652 kernel: audit: type=1006 audit(1719907103.330:1183): pid=4726 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 2 07:58:23.345701 kernel: audit: type=1300 audit(1719907103.330:1183): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd61d80230 a2=3 a3=0 items=0 ppid=1 pid=4726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:23.330000 audit[4726]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd61d80230 a2=3 a3=0 items=0 ppid=1 pid=4726 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:23.344861 systemd[1]: Started session-9.scope. Jul 2 07:58:23.347659 systemd-logind[1723]: New session 9 of user core. Jul 2 07:58:23.330000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:23.355672 kernel: audit: type=1327 audit(1719907103.330:1183): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:23.359000 audit[4726]: USER_START pid=4726 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.365000 audit[4728]: CRED_ACQ pid=4728 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.371102 kernel: audit: type=1105 audit(1719907103.359:1184): pid=4726 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.371307 kernel: audit: type=1103 audit(1719907103.365:1185): pid=4728 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.462000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:23.478861 kernel: audit: type=1400 audit(1719907103.462:1186): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:23.478990 kernel: audit: type=1300 audit(1719907103.462:1186): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00245f020 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:23.462000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00245f020 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:23.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:58:23.464000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:23.464000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00245f040 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:23.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:58:23.471000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:23.471000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022c4940 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:23.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:58:23.473000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:58:23.473000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022c4980 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:58:23.473000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:58:23.681510 sshd[4726]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:23.686000 audit[4726]: USER_END pid=4726 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.687000 audit[4726]: CRED_DISP pid=4726 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:23.694862 systemd[1]: sshd@8-172.31.21.43:22-139.178.89.65:41594.service: Deactivated successfully. Jul 2 07:58:23.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.43:22-139.178.89.65:41594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:23.697804 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 07:58:23.699183 systemd-logind[1723]: Session 9 logged out. Waiting for processes to exit. Jul 2 07:58:23.700268 systemd-logind[1723]: Removed session 9. Jul 2 07:58:25.207137 systemd[1]: run-containerd-runc-k8s.io-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2-runc.7AuPr9.mount: Deactivated successfully. Jul 2 07:58:25.274562 env[1729]: time="2024-07-02T07:58:25.274489454Z" level=info msg="StopPodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\"" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.460 [WARNING][4774] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794", ResourceVersion:"772", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8", Pod:"csi-node-driver-sq7vd", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.49.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali255b46fc789", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.461 [INFO][4774] k8s.go 608: Cleaning up netns ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.462 [INFO][4774] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" iface="eth0" netns="" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.462 [INFO][4774] k8s.go 615: Releasing IP address(es) ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.462 [INFO][4774] utils.go 188: Calico CNI releasing IP address ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.498 [INFO][4780] ipam_plugin.go 411: Releasing address using handleID ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.499 [INFO][4780] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.499 [INFO][4780] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.506 [WARNING][4780] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.506 [INFO][4780] ipam_plugin.go 439: Releasing address using workloadID ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.508 [INFO][4780] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:25.514700 env[1729]: 2024-07-02 07:58:25.511 [INFO][4774] k8s.go 621: Teardown processing complete. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.516179 env[1729]: time="2024-07-02T07:58:25.514734207Z" level=info msg="TearDown network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" successfully" Jul 2 07:58:25.516179 env[1729]: time="2024-07-02T07:58:25.514771149Z" level=info msg="StopPodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" returns successfully" Jul 2 07:58:25.516953 env[1729]: time="2024-07-02T07:58:25.516899594Z" level=info msg="RemovePodSandbox for \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\"" Jul 2 07:58:25.517084 env[1729]: time="2024-07-02T07:58:25.516939171Z" level=info msg="Forcibly stopping sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\"" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.569 [WARNING][4799] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5f9d1ef0-c803-4c2a-a4d6-d10fc80db794", ResourceVersion:"772", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"e723e162e2ce92ff9f8e2e1e64b34d41ccb59c82a44c4b0c258e35bd8bad6db8", Pod:"csi-node-driver-sq7vd", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.49.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali255b46fc789", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.569 [INFO][4799] k8s.go 608: Cleaning up netns ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.570 [INFO][4799] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" iface="eth0" netns="" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.570 [INFO][4799] k8s.go 615: Releasing IP address(es) ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.570 [INFO][4799] utils.go 188: Calico CNI releasing IP address ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.602 [INFO][4805] ipam_plugin.go 411: Releasing address using handleID ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.602 [INFO][4805] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.602 [INFO][4805] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.608 [WARNING][4805] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.608 [INFO][4805] ipam_plugin.go 439: Releasing address using workloadID ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" HandleID="k8s-pod-network.642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Workload="ip--172--31--21--43-k8s-csi--node--driver--sq7vd-eth0" Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.609 [INFO][4805] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:25.617166 env[1729]: 2024-07-02 07:58:25.613 [INFO][4799] k8s.go 621: Teardown processing complete. ContainerID="642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c" Jul 2 07:58:25.618050 env[1729]: time="2024-07-02T07:58:25.617203111Z" level=info msg="TearDown network for sandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" successfully" Jul 2 07:58:25.623169 env[1729]: time="2024-07-02T07:58:25.623119009Z" level=info msg="RemovePodSandbox \"642ec629b97e9be53efd569ddd4ea884d2bee8d6a4fa5a8fb08b912ab4bd731c\" returns successfully" Jul 2 07:58:25.623872 env[1729]: time="2024-07-02T07:58:25.623818673Z" level=info msg="StopPodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\"" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.673 [WARNING][4823] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"435db17a-f771-4cee-8299-f0d293960c11", ResourceVersion:"733", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379", Pod:"coredns-5dd5756b68-sbdzz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c716abaf2a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.673 [INFO][4823] k8s.go 608: Cleaning up netns ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.674 [INFO][4823] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" iface="eth0" netns="" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.674 [INFO][4823] k8s.go 615: Releasing IP address(es) ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.674 [INFO][4823] utils.go 188: Calico CNI releasing IP address ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.726 [INFO][4830] ipam_plugin.go 411: Releasing address using handleID ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.726 [INFO][4830] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.727 [INFO][4830] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.736 [WARNING][4830] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.736 [INFO][4830] ipam_plugin.go 439: Releasing address using workloadID ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.739 [INFO][4830] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:25.746641 env[1729]: 2024-07-02 07:58:25.742 [INFO][4823] k8s.go 621: Teardown processing complete. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.747775 env[1729]: time="2024-07-02T07:58:25.746703395Z" level=info msg="TearDown network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" successfully" Jul 2 07:58:25.747775 env[1729]: time="2024-07-02T07:58:25.746793935Z" level=info msg="StopPodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" returns successfully" Jul 2 07:58:25.747775 env[1729]: time="2024-07-02T07:58:25.747422996Z" level=info msg="RemovePodSandbox for \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\"" Jul 2 07:58:25.747775 env[1729]: time="2024-07-02T07:58:25.747460691Z" level=info msg="Forcibly stopping sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\"" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.807 [WARNING][4849] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"435db17a-f771-4cee-8299-f0d293960c11", ResourceVersion:"733", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"922260a78e0c0f2fd38ac26c799c1fd102ef37cd18d450b25be8baff718b0379", Pod:"coredns-5dd5756b68-sbdzz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3c716abaf2a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.808 [INFO][4849] k8s.go 608: Cleaning up netns ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.808 [INFO][4849] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" iface="eth0" netns="" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.808 [INFO][4849] k8s.go 615: Releasing IP address(es) ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.808 [INFO][4849] utils.go 188: Calico CNI releasing IP address ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.844 [INFO][4855] ipam_plugin.go 411: Releasing address using handleID ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.844 [INFO][4855] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.844 [INFO][4855] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.852 [WARNING][4855] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.852 [INFO][4855] ipam_plugin.go 439: Releasing address using workloadID ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" HandleID="k8s-pod-network.4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--sbdzz-eth0" Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.855 [INFO][4855] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:25.863660 env[1729]: 2024-07-02 07:58:25.857 [INFO][4849] k8s.go 621: Teardown processing complete. ContainerID="4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7" Jul 2 07:58:25.863660 env[1729]: time="2024-07-02T07:58:25.861011018Z" level=info msg="TearDown network for sandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" successfully" Jul 2 07:58:25.867499 env[1729]: time="2024-07-02T07:58:25.867337753Z" level=info msg="RemovePodSandbox \"4f7ffb81c64eb303d8b72cfe05b16af9d7d9c070cd5f0b885ea9aead190774e7\" returns successfully" Jul 2 07:58:25.868118 env[1729]: time="2024-07-02T07:58:25.868085969Z" level=info msg="StopPodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\"" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.920 [WARNING][4873] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0", GenerateName:"calico-kube-controllers-78794c487b-", Namespace:"calico-system", SelfLink:"", UID:"dc5b3d02-77da-4eaa-954b-c4949cdbede2", ResourceVersion:"815", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78794c487b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf", Pod:"calico-kube-controllers-78794c487b-k5d6t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9ec2584604a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.921 [INFO][4873] k8s.go 608: Cleaning up netns ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.922 [INFO][4873] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" iface="eth0" netns="" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.922 [INFO][4873] k8s.go 615: Releasing IP address(es) ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.922 [INFO][4873] utils.go 188: Calico CNI releasing IP address ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.961 [INFO][4879] ipam_plugin.go 411: Releasing address using handleID ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.961 [INFO][4879] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.961 [INFO][4879] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.970 [WARNING][4879] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.970 [INFO][4879] ipam_plugin.go 439: Releasing address using workloadID ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.972 [INFO][4879] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:25.976356 env[1729]: 2024-07-02 07:58:25.974 [INFO][4873] k8s.go 621: Teardown processing complete. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:25.978494 env[1729]: time="2024-07-02T07:58:25.976872877Z" level=info msg="TearDown network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" successfully" Jul 2 07:58:25.978494 env[1729]: time="2024-07-02T07:58:25.976910874Z" level=info msg="StopPodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" returns successfully" Jul 2 07:58:25.978494 env[1729]: time="2024-07-02T07:58:25.977739156Z" level=info msg="RemovePodSandbox for \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\"" Jul 2 07:58:25.978494 env[1729]: time="2024-07-02T07:58:25.977807608Z" level=info msg="Forcibly stopping sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\"" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.030 [WARNING][4898] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0", GenerateName:"calico-kube-controllers-78794c487b-", Namespace:"calico-system", SelfLink:"", UID:"dc5b3d02-77da-4eaa-954b-c4949cdbede2", ResourceVersion:"815", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"78794c487b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"17c931ad67e6327d98c657f1a3fd6da86b4349e53295789985d0e91ef250ffcf", Pod:"calico-kube-controllers-78794c487b-k5d6t", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.49.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9ec2584604a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.030 [INFO][4898] k8s.go 608: Cleaning up netns ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.030 [INFO][4898] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" iface="eth0" netns="" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.030 [INFO][4898] k8s.go 615: Releasing IP address(es) ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.031 [INFO][4898] utils.go 188: Calico CNI releasing IP address ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.068 [INFO][4904] ipam_plugin.go 411: Releasing address using handleID ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.068 [INFO][4904] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.069 [INFO][4904] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.077 [WARNING][4904] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.077 [INFO][4904] ipam_plugin.go 439: Releasing address using workloadID ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" HandleID="k8s-pod-network.60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Workload="ip--172--31--21--43-k8s-calico--kube--controllers--78794c487b--k5d6t-eth0" Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.079 [INFO][4904] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:26.083601 env[1729]: 2024-07-02 07:58:26.081 [INFO][4898] k8s.go 621: Teardown processing complete. ContainerID="60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb" Jul 2 07:58:26.084417 env[1729]: time="2024-07-02T07:58:26.083642768Z" level=info msg="TearDown network for sandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" successfully" Jul 2 07:58:26.088636 env[1729]: time="2024-07-02T07:58:26.088576958Z" level=info msg="RemovePodSandbox \"60d6d0558c410ef98217b51372ad59fc839a9ae88e5e46e461317e323ac248fb\" returns successfully" Jul 2 07:58:26.089342 env[1729]: time="2024-07-02T07:58:26.089311283Z" level=info msg="StopPodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\"" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.149 [WARNING][4924] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"de8ff49c-6fb7-45da-90fe-6833a98bffc8", ResourceVersion:"764", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1", Pod:"coredns-5dd5756b68-wc4nr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calice716c8d827", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.150 [INFO][4924] k8s.go 608: Cleaning up netns ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.150 [INFO][4924] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" iface="eth0" netns="" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.150 [INFO][4924] k8s.go 615: Releasing IP address(es) ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.150 [INFO][4924] utils.go 188: Calico CNI releasing IP address ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.198 [INFO][4932] ipam_plugin.go 411: Releasing address using handleID ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.198 [INFO][4932] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.198 [INFO][4932] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.205 [WARNING][4932] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.206 [INFO][4932] ipam_plugin.go 439: Releasing address using workloadID ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.208 [INFO][4932] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:26.218082 env[1729]: 2024-07-02 07:58:26.211 [INFO][4924] k8s.go 621: Teardown processing complete. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.218082 env[1729]: time="2024-07-02T07:58:26.214152460Z" level=info msg="TearDown network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" successfully" Jul 2 07:58:26.218082 env[1729]: time="2024-07-02T07:58:26.214188654Z" level=info msg="StopPodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" returns successfully" Jul 2 07:58:26.218082 env[1729]: time="2024-07-02T07:58:26.214721212Z" level=info msg="RemovePodSandbox for \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\"" Jul 2 07:58:26.218082 env[1729]: time="2024-07-02T07:58:26.214755649Z" level=info msg="Forcibly stopping sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\"" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.289 [WARNING][4952] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"de8ff49c-6fb7-45da-90fe-6833a98bffc8", ResourceVersion:"764", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 57, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"1e56537fa693608d0526e1af8422e9239123ea0ceaa82841aa18ff6c8ba9f3e1", Pod:"coredns-5dd5756b68-wc4nr", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.49.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calice716c8d827", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.290 [INFO][4952] k8s.go 608: Cleaning up netns ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.290 [INFO][4952] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" iface="eth0" netns="" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.290 [INFO][4952] k8s.go 615: Releasing IP address(es) ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.290 [INFO][4952] utils.go 188: Calico CNI releasing IP address ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.321 [INFO][4958] ipam_plugin.go 411: Releasing address using handleID ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.321 [INFO][4958] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.321 [INFO][4958] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.336 [WARNING][4958] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.336 [INFO][4958] ipam_plugin.go 439: Releasing address using workloadID ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" HandleID="k8s-pod-network.87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Workload="ip--172--31--21--43-k8s-coredns--5dd5756b68--wc4nr-eth0" Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.338 [INFO][4958] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:58:26.343380 env[1729]: 2024-07-02 07:58:26.340 [INFO][4952] k8s.go 621: Teardown processing complete. ContainerID="87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273" Jul 2 07:58:26.348021 env[1729]: time="2024-07-02T07:58:26.343407436Z" level=info msg="TearDown network for sandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" successfully" Jul 2 07:58:26.349663 env[1729]: time="2024-07-02T07:58:26.349509555Z" level=info msg="RemovePodSandbox \"87be786d84fd0954e34eabd448dbff336acf6ec5874d67742d9e7f198de7c273\" returns successfully" Jul 2 07:58:28.706444 systemd[1]: Started sshd@9-172.31.21.43:22-139.178.89.65:38852.service. Jul 2 07:58:28.715069 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 07:58:28.715197 kernel: audit: type=1130 audit(1719907108.708:1193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.43:22-139.178.89.65:38852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:28.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.43:22-139.178.89.65:38852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:28.912585 kernel: audit: type=1101 audit(1719907108.903:1194): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.903000 audit[4977]: USER_ACCT pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.912000 audit[4977]: CRED_ACQ pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.915084 sshd[4977]: Accepted publickey for core from 139.178.89.65 port 38852 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:28.926174 sshd[4977]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:28.930664 kernel: audit: type=1103 audit(1719907108.912:1195): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.931248 kernel: audit: type=1006 audit(1719907108.912:1196): pid=4977 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 2 07:58:28.931326 kernel: audit: type=1300 audit(1719907108.912:1196): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe916b3ff0 a2=3 a3=0 items=0 ppid=1 pid=4977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:28.912000 audit[4977]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe916b3ff0 a2=3 a3=0 items=0 ppid=1 pid=4977 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:28.944374 kernel: audit: type=1327 audit(1719907108.912:1196): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:28.912000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:28.943926 systemd[1]: Started session-10.scope. Jul 2 07:58:28.948811 systemd-logind[1723]: New session 10 of user core. Jul 2 07:58:28.971593 kernel: audit: type=1105 audit(1719907108.965:1197): pid=4977 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.965000 audit[4977]: USER_START pid=4977 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.972000 audit[4979]: CRED_ACQ pid=4979 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:28.977630 kernel: audit: type=1103 audit(1719907108.972:1198): pid=4979 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.198938 sshd[4977]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:29.200000 audit[4977]: USER_END pid=4977 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.200000 audit[4977]: CRED_DISP pid=4977 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.207807 systemd[1]: sshd@9-172.31.21.43:22-139.178.89.65:38852.service: Deactivated successfully. Jul 2 07:58:29.209025 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 07:58:29.210889 kernel: audit: type=1106 audit(1719907109.200:1199): pid=4977 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.210960 kernel: audit: type=1104 audit(1719907109.200:1200): pid=4977 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.43:22-139.178.89.65:38852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:29.211342 systemd-logind[1723]: Session 10 logged out. Waiting for processes to exit. Jul 2 07:58:29.212782 systemd-logind[1723]: Removed session 10. Jul 2 07:58:29.226906 systemd[1]: Started sshd@10-172.31.21.43:22-139.178.89.65:38868.service. Jul 2 07:58:29.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.43:22-139.178.89.65:38868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:29.394000 audit[4989]: USER_ACCT pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.395666 sshd[4989]: Accepted publickey for core from 139.178.89.65 port 38868 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:29.396000 audit[4989]: CRED_ACQ pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.396000 audit[4989]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6c22b330 a2=3 a3=0 items=0 ppid=1 pid=4989 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:29.396000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:29.398050 sshd[4989]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:29.404139 systemd[1]: Started session-11.scope. Jul 2 07:58:29.404765 systemd-logind[1723]: New session 11 of user core. Jul 2 07:58:29.411000 audit[4989]: USER_START pid=4989 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.413000 audit[4991]: CRED_ACQ pid=4991 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.914454 sshd[4989]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:29.917000 audit[4989]: USER_END pid=4989 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.917000 audit[4989]: CRED_DISP pid=4989 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:29.919811 systemd[1]: sshd@10-172.31.21.43:22-139.178.89.65:38868.service: Deactivated successfully. Jul 2 07:58:29.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.43:22-139.178.89.65:38868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:29.927431 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 07:58:29.933252 systemd-logind[1723]: Session 11 logged out. Waiting for processes to exit. Jul 2 07:58:29.953402 systemd[1]: Started sshd@11-172.31.21.43:22-139.178.89.65:38876.service. Jul 2 07:58:29.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.43:22-139.178.89.65:38876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:29.960071 systemd-logind[1723]: Removed session 11. Jul 2 07:58:30.127000 audit[4999]: USER_ACCT pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:30.128380 sshd[4999]: Accepted publickey for core from 139.178.89.65 port 38876 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:30.129000 audit[4999]: CRED_ACQ pid=4999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:30.129000 audit[4999]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccabbccd0 a2=3 a3=0 items=0 ppid=1 pid=4999 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:30.129000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:30.131414 sshd[4999]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:30.139732 systemd[1]: Started session-12.scope. Jul 2 07:58:30.140997 systemd-logind[1723]: New session 12 of user core. Jul 2 07:58:30.148000 audit[4999]: USER_START pid=4999 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:30.150000 audit[5001]: CRED_ACQ pid=5001 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:30.376144 sshd[4999]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:30.377000 audit[4999]: USER_END pid=4999 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:30.377000 audit[4999]: CRED_DISP pid=4999 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:30.379661 systemd-logind[1723]: Session 12 logged out. Waiting for processes to exit. Jul 2 07:58:30.380005 systemd[1]: sshd@11-172.31.21.43:22-139.178.89.65:38876.service: Deactivated successfully. Jul 2 07:58:30.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.43:22-139.178.89.65:38876 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:30.381129 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 07:58:30.382413 systemd-logind[1723]: Removed session 12. Jul 2 07:58:32.431508 systemd[1]: run-containerd-runc-k8s.io-f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f-runc.f0NuOG.mount: Deactivated successfully. Jul 2 07:58:35.413587 systemd[1]: Started sshd@12-172.31.21.43:22-139.178.89.65:38882.service. Jul 2 07:58:35.423559 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 2 07:58:35.423707 kernel: audit: type=1130 audit(1719907115.414:1220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.43:22-139.178.89.65:38882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:35.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.43:22-139.178.89.65:38882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:35.622000 audit[5035]: USER_ACCT pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.623165 sshd[5035]: Accepted publickey for core from 139.178.89.65 port 38882 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:35.628558 kernel: audit: type=1101 audit(1719907115.622:1221): pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.628000 audit[5035]: CRED_ACQ pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.629419 sshd[5035]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:35.638955 kernel: audit: type=1103 audit(1719907115.628:1222): pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.639174 kernel: audit: type=1006 audit(1719907115.628:1223): pid=5035 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 2 07:58:35.639608 systemd-logind[1723]: New session 13 of user core. Jul 2 07:58:35.628000 audit[5035]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8617ddc0 a2=3 a3=0 items=0 ppid=1 pid=5035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:35.639669 systemd[1]: Started session-13.scope. Jul 2 07:58:35.647565 kernel: audit: type=1300 audit(1719907115.628:1223): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8617ddc0 a2=3 a3=0 items=0 ppid=1 pid=5035 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:35.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:35.654836 kernel: audit: type=1327 audit(1719907115.628:1223): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:35.662000 audit[5035]: USER_START pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.665000 audit[5037]: CRED_ACQ pid=5037 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.674336 kernel: audit: type=1105 audit(1719907115.662:1224): pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.674473 kernel: audit: type=1103 audit(1719907115.665:1225): pid=5037 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.890355 sshd[5035]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:35.893000 audit[5035]: USER_END pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.897246 systemd[1]: sshd@12-172.31.21.43:22-139.178.89.65:38882.service: Deactivated successfully. Jul 2 07:58:35.898491 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 07:58:35.893000 audit[5035]: CRED_DISP pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.901051 systemd-logind[1723]: Session 13 logged out. Waiting for processes to exit. Jul 2 07:58:35.902655 systemd-logind[1723]: Removed session 13. Jul 2 07:58:35.906082 kernel: audit: type=1106 audit(1719907115.893:1226): pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.906220 kernel: audit: type=1104 audit(1719907115.893:1227): pid=5035 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:35.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.43:22-139.178.89.65:38882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:40.920619 systemd[1]: Started sshd@13-172.31.21.43:22-139.178.89.65:37670.service. Jul 2 07:58:40.928685 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:58:40.928816 kernel: audit: type=1130 audit(1719907120.921:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.43:22-139.178.89.65:37670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:40.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.43:22-139.178.89.65:37670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:41.093000 audit[5059]: USER_ACCT pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.094637 sshd[5059]: Accepted publickey for core from 139.178.89.65 port 37670 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:41.099000 audit[5059]: CRED_ACQ pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.101443 sshd[5059]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:41.106380 kernel: audit: type=1101 audit(1719907121.093:1230): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.106495 kernel: audit: type=1103 audit(1719907121.099:1231): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.106546 kernel: audit: type=1006 audit(1719907121.100:1232): pid=5059 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 2 07:58:41.111035 systemd[1]: Started session-14.scope. Jul 2 07:58:41.100000 audit[5059]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1cc0f6f0 a2=3 a3=0 items=0 ppid=1 pid=5059 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:41.111894 systemd-logind[1723]: New session 14 of user core. Jul 2 07:58:41.100000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:41.119781 kernel: audit: type=1300 audit(1719907121.100:1232): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1cc0f6f0 a2=3 a3=0 items=0 ppid=1 pid=5059 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:41.119988 kernel: audit: type=1327 audit(1719907121.100:1232): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:41.121000 audit[5059]: USER_START pid=5059 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.128785 kernel: audit: type=1105 audit(1719907121.121:1233): pid=5059 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.129000 audit[5061]: CRED_ACQ pid=5061 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.135583 kernel: audit: type=1103 audit(1719907121.129:1234): pid=5061 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.343823 sshd[5059]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:41.344000 audit[5059]: USER_END pid=5059 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.356914 kernel: audit: type=1106 audit(1719907121.344:1235): pid=5059 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.344000 audit[5059]: CRED_DISP pid=5059 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.363590 kernel: audit: type=1104 audit(1719907121.344:1236): pid=5059 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:41.363818 systemd[1]: sshd@13-172.31.21.43:22-139.178.89.65:37670.service: Deactivated successfully. Jul 2 07:58:41.364923 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 07:58:41.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.43:22-139.178.89.65:37670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:41.365894 systemd-logind[1723]: Session 14 logged out. Waiting for processes to exit. Jul 2 07:58:41.367353 systemd-logind[1723]: Removed session 14. Jul 2 07:58:46.375784 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:58:46.375904 kernel: audit: type=1130 audit(1719907126.372:1238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.43:22-139.178.89.65:37680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:46.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.43:22-139.178.89.65:37680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:46.373644 systemd[1]: Started sshd@14-172.31.21.43:22-139.178.89.65:37680.service. Jul 2 07:58:46.542000 audit[5071]: USER_ACCT pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.544878 sshd[5071]: Accepted publickey for core from 139.178.89.65 port 37680 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:46.555564 kernel: audit: type=1101 audit(1719907126.542:1239): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.557117 sshd[5071]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:46.554000 audit[5071]: CRED_ACQ pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.565556 kernel: audit: type=1103 audit(1719907126.554:1240): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.571877 kernel: audit: type=1006 audit(1719907126.554:1241): pid=5071 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 2 07:58:46.576699 systemd-logind[1723]: New session 15 of user core. Jul 2 07:58:46.577877 systemd[1]: Started session-15.scope. Jul 2 07:58:46.554000 audit[5071]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffbf4c510 a2=3 a3=0 items=0 ppid=1 pid=5071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:46.590594 kernel: audit: type=1300 audit(1719907126.554:1241): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffbf4c510 a2=3 a3=0 items=0 ppid=1 pid=5071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:46.554000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:46.602995 kernel: audit: type=1327 audit(1719907126.554:1241): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:46.603111 kernel: audit: type=1105 audit(1719907126.600:1242): pid=5071 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.600000 audit[5071]: USER_START pid=5071 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.603000 audit[5073]: CRED_ACQ pid=5073 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.616596 kernel: audit: type=1103 audit(1719907126.603:1243): pid=5073 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.884129 sshd[5071]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:46.885000 audit[5071]: USER_END pid=5071 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.889020 systemd[1]: sshd@14-172.31.21.43:22-139.178.89.65:37680.service: Deactivated successfully. Jul 2 07:58:46.890122 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 07:58:46.885000 audit[5071]: CRED_DISP pid=5071 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.896752 kernel: audit: type=1106 audit(1719907126.885:1244): pid=5071 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.896920 kernel: audit: type=1104 audit(1719907126.885:1245): pid=5071 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:46.896940 systemd-logind[1723]: Session 15 logged out. Waiting for processes to exit. Jul 2 07:58:46.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.43:22-139.178.89.65:37680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:46.898482 systemd-logind[1723]: Removed session 15. Jul 2 07:58:51.915353 systemd[1]: Started sshd@15-172.31.21.43:22-139.178.89.65:44916.service. Jul 2 07:58:51.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.43:22-139.178.89.65:44916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:51.917270 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:58:51.917430 kernel: audit: type=1130 audit(1719907131.915:1247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.43:22-139.178.89.65:44916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:52.100000 audit[5096]: USER_ACCT pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.108661 kernel: audit: type=1101 audit(1719907132.100:1248): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.109925 kernel: audit: type=1103 audit(1719907132.108:1249): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.108000 audit[5096]: CRED_ACQ pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.110210 sshd[5096]: Accepted publickey for core from 139.178.89.65 port 44916 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:52.109224 sshd[5096]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:52.118113 systemd[1]: Started session-16.scope. Jul 2 07:58:52.120368 kernel: audit: type=1006 audit(1719907132.108:1250): pid=5096 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 2 07:58:52.119662 systemd-logind[1723]: New session 16 of user core. Jul 2 07:58:52.108000 audit[5096]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc1648320 a2=3 a3=0 items=0 ppid=1 pid=5096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:52.129236 kernel: audit: type=1300 audit(1719907132.108:1250): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc1648320 a2=3 a3=0 items=0 ppid=1 pid=5096 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:52.108000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:52.128000 audit[5096]: USER_START pid=5096 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.140869 kernel: audit: type=1327 audit(1719907132.108:1250): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:52.141017 kernel: audit: type=1105 audit(1719907132.128:1251): pid=5096 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.141059 kernel: audit: type=1103 audit(1719907132.132:1252): pid=5098 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.132000 audit[5098]: CRED_ACQ pid=5098 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.354611 sshd[5096]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:52.356000 audit[5096]: USER_END pid=5096 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.358000 audit[5096]: CRED_DISP pid=5096 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.366305 systemd[1]: sshd@15-172.31.21.43:22-139.178.89.65:44916.service: Deactivated successfully. Jul 2 07:58:52.367375 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 07:58:52.370752 kernel: audit: type=1106 audit(1719907132.356:1253): pid=5096 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.370937 kernel: audit: type=1104 audit(1719907132.358:1254): pid=5096 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:52.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.43:22-139.178.89.65:44916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:52.373131 systemd-logind[1723]: Session 16 logged out. Waiting for processes to exit. Jul 2 07:58:52.374456 systemd-logind[1723]: Removed session 16. Jul 2 07:58:55.192510 systemd[1]: run-containerd-runc-k8s.io-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2-runc.vkBuvy.mount: Deactivated successfully. Jul 2 07:58:57.381500 systemd[1]: Started sshd@16-172.31.21.43:22-139.178.89.65:44924.service. Jul 2 07:58:57.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.43:22-139.178.89.65:44924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:57.383021 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:58:57.383126 kernel: audit: type=1130 audit(1719907137.380:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.43:22-139.178.89.65:44924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:57.563000 audit[5127]: USER_ACCT pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.565382 sshd[5127]: Accepted publickey for core from 139.178.89.65 port 44924 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:57.571562 kernel: audit: type=1101 audit(1719907137.563:1257): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.570000 audit[5127]: CRED_ACQ pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.572696 sshd[5127]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:57.577791 kernel: audit: type=1103 audit(1719907137.570:1258): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.570000 audit[5127]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc17647aa0 a2=3 a3=0 items=0 ppid=1 pid=5127 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:57.592104 kernel: audit: type=1006 audit(1719907137.570:1259): pid=5127 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 07:58:57.592233 kernel: audit: type=1300 audit(1719907137.570:1259): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc17647aa0 a2=3 a3=0 items=0 ppid=1 pid=5127 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:57.594968 kernel: audit: type=1327 audit(1719907137.570:1259): proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:57.570000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:57.597227 systemd[1]: Started session-17.scope. Jul 2 07:58:57.597944 systemd-logind[1723]: New session 17 of user core. Jul 2 07:58:57.606000 audit[5127]: USER_START pid=5127 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.611000 audit[5129]: CRED_ACQ pid=5129 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.620156 kernel: audit: type=1105 audit(1719907137.606:1260): pid=5127 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.620277 kernel: audit: type=1103 audit(1719907137.611:1261): pid=5129 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.888207 sshd[5127]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:57.889000 audit[5127]: USER_END pid=5127 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.895916 systemd[1]: sshd@16-172.31.21.43:22-139.178.89.65:44924.service: Deactivated successfully. Jul 2 07:58:57.898087 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 07:58:57.907640 kernel: audit: type=1106 audit(1719907137.889:1262): pid=5127 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.907733 kernel: audit: type=1104 audit(1719907137.889:1263): pid=5127 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.889000 audit[5127]: CRED_DISP pid=5127 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:57.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.43:22-139.178.89.65:44924 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:57.920223 systemd-logind[1723]: Session 17 logged out. Waiting for processes to exit. Jul 2 07:58:57.924165 systemd[1]: Started sshd@17-172.31.21.43:22-139.178.89.65:44940.service. Jul 2 07:58:57.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.43:22-139.178.89.65:44940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:57.927680 systemd-logind[1723]: Removed session 17. Jul 2 07:58:58.109000 audit[5139]: USER_ACCT pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:58.111655 sshd[5139]: Accepted publickey for core from 139.178.89.65 port 44940 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:58.119000 audit[5139]: CRED_ACQ pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:58.120000 audit[5139]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb7ddfaa0 a2=3 a3=0 items=0 ppid=1 pid=5139 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:58.120000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:58.126889 sshd[5139]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:58.148246 systemd-logind[1723]: New session 18 of user core. Jul 2 07:58:58.148858 systemd[1]: Started session-18.scope. Jul 2 07:58:58.172000 audit[5139]: USER_START pid=5139 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:58.173000 audit[5141]: CRED_ACQ pid=5141 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:58.860011 sshd[5139]: pam_unix(sshd:session): session closed for user core Jul 2 07:58:58.861000 audit[5139]: USER_END pid=5139 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:58.862000 audit[5139]: CRED_DISP pid=5139 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:58.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.43:22-139.178.89.65:44940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:58.865395 systemd-logind[1723]: Session 18 logged out. Waiting for processes to exit. Jul 2 07:58:58.865782 systemd[1]: sshd@17-172.31.21.43:22-139.178.89.65:44940.service: Deactivated successfully. Jul 2 07:58:58.866897 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 07:58:58.868204 systemd-logind[1723]: Removed session 18. Jul 2 07:58:58.884621 systemd[1]: Started sshd@18-172.31.21.43:22-139.178.89.65:53280.service. Jul 2 07:58:58.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.43:22-139.178.89.65:53280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:58:59.054000 audit[5149]: USER_ACCT pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:59.055226 sshd[5149]: Accepted publickey for core from 139.178.89.65 port 53280 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:58:59.055000 audit[5149]: CRED_ACQ pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:59.056000 audit[5149]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce9434490 a2=3 a3=0 items=0 ppid=1 pid=5149 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:58:59.056000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:58:59.056941 sshd[5149]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:58:59.062956 systemd[1]: Started session-19.scope. Jul 2 07:58:59.063962 systemd-logind[1723]: New session 19 of user core. Jul 2 07:58:59.068000 audit[5149]: USER_START pid=5149 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:58:59.070000 audit[5151]: CRED_ACQ pid=5151 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:00.416000 audit[5166]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:00.416000 audit[5166]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffe7f22fbb0 a2=0 a3=7ffe7f22fb9c items=0 ppid=2928 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:00.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:00.418000 audit[5166]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5166 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:00.418000 audit[5166]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe7f22fbb0 a2=0 a3=0 items=0 ppid=2928 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:00.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:00.433000 audit[5168]: NETFILTER_CFG table=filter:117 family=2 entries=32 op=nft_register_rule pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:00.433000 audit[5168]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffcdf5b9310 a2=0 a3=7ffcdf5b92fc items=0 ppid=2928 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:00.433000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:00.435706 sshd[5149]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:00.434000 audit[5168]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=5168 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:00.434000 audit[5168]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcdf5b9310 a2=0 a3=0 items=0 ppid=2928 pid=5168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:00.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:00.439000 audit[5149]: USER_END pid=5149 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:00.439000 audit[5149]: CRED_DISP pid=5149 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:00.442000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.43:22-139.178.89.65:53280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:00.442271 systemd[1]: sshd@18-172.31.21.43:22-139.178.89.65:53280.service: Deactivated successfully. Jul 2 07:59:00.443997 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 07:59:00.445187 systemd-logind[1723]: Session 19 logged out. Waiting for processes to exit. Jul 2 07:59:00.446194 systemd-logind[1723]: Removed session 19. Jul 2 07:59:00.464247 systemd[1]: Started sshd@19-172.31.21.43:22-139.178.89.65:53294.service. Jul 2 07:59:00.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.43:22-139.178.89.65:53294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:00.646000 audit[5171]: USER_ACCT pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:00.647029 sshd[5171]: Accepted publickey for core from 139.178.89.65 port 53294 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:00.648000 audit[5171]: CRED_ACQ pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:00.648000 audit[5171]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff40c4bdd0 a2=3 a3=0 items=0 ppid=1 pid=5171 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:00.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:00.650107 sshd[5171]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:00.673224 systemd[1]: Started session-20.scope. Jul 2 07:59:00.676633 systemd-logind[1723]: New session 20 of user core. Jul 2 07:59:00.707000 audit[5171]: USER_START pid=5171 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:00.710000 audit[5173]: CRED_ACQ pid=5173 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:01.552858 sshd[5171]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:01.554000 audit[5171]: USER_END pid=5171 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:01.555000 audit[5171]: CRED_DISP pid=5171 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:01.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.43:22-139.178.89.65:53294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:01.557885 systemd[1]: sshd@19-172.31.21.43:22-139.178.89.65:53294.service: Deactivated successfully. Jul 2 07:59:01.559813 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 07:59:01.561664 systemd-logind[1723]: Session 20 logged out. Waiting for processes to exit. Jul 2 07:59:01.562972 systemd-logind[1723]: Removed session 20. Jul 2 07:59:01.581915 systemd[1]: Started sshd@20-172.31.21.43:22-139.178.89.65:53298.service. Jul 2 07:59:01.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.43:22-139.178.89.65:53298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:01.767000 audit[5181]: USER_ACCT pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:01.768762 sshd[5181]: Accepted publickey for core from 139.178.89.65 port 53298 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:01.768000 audit[5181]: CRED_ACQ pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:01.768000 audit[5181]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7efa6cb0 a2=3 a3=0 items=0 ppid=1 pid=5181 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:01.768000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:01.771469 sshd[5181]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:01.779581 systemd[1]: Started session-21.scope. Jul 2 07:59:01.780128 systemd-logind[1723]: New session 21 of user core. Jul 2 07:59:01.789000 audit[5181]: USER_START pid=5181 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:01.791000 audit[5183]: CRED_ACQ pid=5183 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:02.033888 sshd[5181]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:02.037000 audit[5181]: USER_END pid=5181 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:02.038000 audit[5181]: CRED_DISP pid=5181 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:02.043753 systemd[1]: sshd@20-172.31.21.43:22-139.178.89.65:53298.service: Deactivated successfully. Jul 2 07:59:02.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.43:22-139.178.89.65:53298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:02.051265 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 07:59:02.058334 systemd-logind[1723]: Session 21 logged out. Waiting for processes to exit. Jul 2 07:59:02.060350 systemd-logind[1723]: Removed session 21. Jul 2 07:59:02.441638 systemd[1]: run-containerd-runc-k8s.io-f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f-runc.M5CPVm.mount: Deactivated successfully. Jul 2 07:59:06.411390 systemd[1]: run-containerd-runc-k8s.io-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2-runc.9vbcXv.mount: Deactivated successfully. Jul 2 07:59:07.062307 systemd[1]: Started sshd@21-172.31.21.43:22-139.178.89.65:53302.service. Jul 2 07:59:07.069749 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 2 07:59:07.069895 kernel: audit: type=1130 audit(1719907147.062:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.43:22-139.178.89.65:53302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:07.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.43:22-139.178.89.65:53302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:07.239000 audit[5236]: USER_ACCT pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.242873 sshd[5236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:07.250577 kernel: audit: type=1101 audit(1719907147.239:1306): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.250623 sshd[5236]: Accepted publickey for core from 139.178.89.65 port 53302 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:07.264370 kernel: audit: type=1103 audit(1719907147.240:1307): pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.240000 audit[5236]: CRED_ACQ pid=5236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.273055 kernel: audit: type=1006 audit(1719907147.240:1308): pid=5236 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 2 07:59:07.292891 kernel: audit: type=1300 audit(1719907147.240:1308): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff38bf9010 a2=3 a3=0 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:07.240000 audit[5236]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff38bf9010 a2=3 a3=0 items=0 ppid=1 pid=5236 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:07.276509 systemd[1]: Started session-22.scope. Jul 2 07:59:07.279283 systemd-logind[1723]: New session 22 of user core. Jul 2 07:59:07.240000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:07.302394 kernel: audit: type=1327 audit(1719907147.240:1308): proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:07.318000 audit[5236]: USER_START pid=5236 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.325573 kernel: audit: type=1105 audit(1719907147.318:1309): pid=5236 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.325000 audit[5238]: CRED_ACQ pid=5238 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.332584 kernel: audit: type=1103 audit(1719907147.325:1310): pid=5238 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.571235 sshd[5236]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:07.571000 audit[5236]: USER_END pid=5236 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.580560 kernel: audit: type=1106 audit(1719907147.571:1311): pid=5236 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.580846 systemd[1]: sshd@21-172.31.21.43:22-139.178.89.65:53302.service: Deactivated successfully. Jul 2 07:59:07.582938 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 07:59:07.584252 systemd-logind[1723]: Session 22 logged out. Waiting for processes to exit. Jul 2 07:59:07.586407 systemd-logind[1723]: Removed session 22. Jul 2 07:59:07.571000 audit[5236]: CRED_DISP pid=5236 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:07.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.43:22-139.178.89.65:53302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:07.592555 kernel: audit: type=1104 audit(1719907147.571:1312): pid=5236 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:08.316450 kubelet[2694]: I0702 07:59:08.316396 2694 topology_manager.go:215] "Topology Admit Handler" podUID="e997acb4-0e1e-41d3-865f-197ceac67e2e" podNamespace="calico-apiserver" podName="calico-apiserver-5f595bb764-lqs8x" Jul 2 07:59:08.339208 systemd[1]: Created slice kubepods-besteffort-pode997acb4_0e1e_41d3_865f_197ceac67e2e.slice. Jul 2 07:59:08.402000 audit[5248]: NETFILTER_CFG table=filter:119 family=2 entries=33 op=nft_register_rule pid=5248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:08.402000 audit[5248]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffd6969f950 a2=0 a3=7ffd6969f93c items=0 ppid=2928 pid=5248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:08.402000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:08.404000 audit[5248]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=5248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:08.404000 audit[5248]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd6969f950 a2=0 a3=0 items=0 ppid=2928 pid=5248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:08.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:08.432000 audit[5250]: NETFILTER_CFG table=filter:121 family=2 entries=34 op=nft_register_rule pid=5250 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:08.432000 audit[5250]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7fff2f88b680 a2=0 a3=7fff2f88b66c items=0 ppid=2928 pid=5250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:08.432000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:08.434000 audit[5250]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=5250 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:08.434000 audit[5250]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff2f88b680 a2=0 a3=0 items=0 ppid=2928 pid=5250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:08.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:08.517284 kubelet[2694]: I0702 07:59:08.517241 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e997acb4-0e1e-41d3-865f-197ceac67e2e-calico-apiserver-certs\") pod \"calico-apiserver-5f595bb764-lqs8x\" (UID: \"e997acb4-0e1e-41d3-865f-197ceac67e2e\") " pod="calico-apiserver/calico-apiserver-5f595bb764-lqs8x" Jul 2 07:59:08.517615 kubelet[2694]: I0702 07:59:08.517595 2694 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bzzxh\" (UniqueName: \"kubernetes.io/projected/e997acb4-0e1e-41d3-865f-197ceac67e2e-kube-api-access-bzzxh\") pod \"calico-apiserver-5f595bb764-lqs8x\" (UID: \"e997acb4-0e1e-41d3-865f-197ceac67e2e\") " pod="calico-apiserver/calico-apiserver-5f595bb764-lqs8x" Jul 2 07:59:08.633843 kubelet[2694]: E0702 07:59:08.629208 2694 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Jul 2 07:59:08.639602 kubelet[2694]: E0702 07:59:08.639392 2694 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/e997acb4-0e1e-41d3-865f-197ceac67e2e-calico-apiserver-certs podName:e997acb4-0e1e-41d3-865f-197ceac67e2e nodeName:}" failed. No retries permitted until 2024-07-02 07:59:09.134135877 +0000 UTC m=+104.219686803 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/e997acb4-0e1e-41d3-865f-197ceac67e2e-calico-apiserver-certs") pod "calico-apiserver-5f595bb764-lqs8x" (UID: "e997acb4-0e1e-41d3-865f-197ceac67e2e") : secret "calico-apiserver-certs" not found Jul 2 07:59:09.285905 env[1729]: time="2024-07-02T07:59:09.285859100Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5f595bb764-lqs8x,Uid:e997acb4-0e1e-41d3-865f-197ceac67e2e,Namespace:calico-apiserver,Attempt:0,}" Jul 2 07:59:09.548000 audit[5271]: NETFILTER_CFG table=filter:123 family=2 entries=22 op=nft_register_rule pid=5271 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:09.548000 audit[5271]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fffd2205a80 a2=0 a3=7fffd2205a6c items=0 ppid=2928 pid=5271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.548000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:09.559000 audit[5271]: NETFILTER_CFG table=nat:124 family=2 entries=104 op=nft_register_chain pid=5271 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:09.559000 audit[5271]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7fffd2205a80 a2=0 a3=7fffd2205a6c items=0 ppid=2928 pid=5271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.559000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:09.642419 (udev-worker)[5273]: Network interface NamePolicy= disabled on kernel command line. Jul 2 07:59:09.644021 systemd-networkd[1458]: cali88c64a9f7ef: Link UP Jul 2 07:59:09.648208 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:59:09.648321 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali88c64a9f7ef: link becomes ready Jul 2 07:59:09.648060 systemd-networkd[1458]: cali88c64a9f7ef: Gained carrier Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.446 [INFO][5253] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0 calico-apiserver-5f595bb764- calico-apiserver e997acb4-0e1e-41d3-865f-197ceac67e2e 1103 0 2024-07-02 07:59:08 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5f595bb764 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-21-43 calico-apiserver-5f595bb764-lqs8x eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali88c64a9f7ef [] []}} ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.449 [INFO][5253] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.524 [INFO][5265] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" HandleID="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Workload="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.558 [INFO][5265] ipam_plugin.go 264: Auto assigning IP ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" HandleID="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Workload="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000265ed0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-21-43", "pod":"calico-apiserver-5f595bb764-lqs8x", "timestamp":"2024-07-02 07:59:09.524054725 +0000 UTC"}, Hostname:"ip-172-31-21-43", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.558 [INFO][5265] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.558 [INFO][5265] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.558 [INFO][5265] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-43' Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.565 [INFO][5265] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.573 [INFO][5265] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.583 [INFO][5265] ipam.go 489: Trying affinity for 192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.587 [INFO][5265] ipam.go 155: Attempting to load block cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.594 [INFO][5265] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.49.128/26 host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.594 [INFO][5265] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.49.128/26 handle="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.600 [INFO][5265] ipam.go 1685: Creating new handle: k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916 Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.612 [INFO][5265] ipam.go 1203: Writing block in order to claim IPs block=192.168.49.128/26 handle="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.621 [INFO][5265] ipam.go 1216: Successfully claimed IPs: [192.168.49.133/26] block=192.168.49.128/26 handle="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.621 [INFO][5265] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.49.133/26] handle="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" host="ip-172-31-21-43" Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.621 [INFO][5265] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:59:09.668765 env[1729]: 2024-07-02 07:59:09.621 [INFO][5265] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.49.133/26] IPv6=[] ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" HandleID="k8s-pod-network.dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Workload="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.670059 env[1729]: 2024-07-02 07:59:09.628 [INFO][5253] k8s.go 386: Populated endpoint ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0", GenerateName:"calico-apiserver-5f595bb764-", Namespace:"calico-apiserver", SelfLink:"", UID:"e997acb4-0e1e-41d3-865f-197ceac67e2e", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 59, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5f595bb764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"", Pod:"calico-apiserver-5f595bb764-lqs8x", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali88c64a9f7ef", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:59:09.670059 env[1729]: 2024-07-02 07:59:09.628 [INFO][5253] k8s.go 387: Calico CNI using IPs: [192.168.49.133/32] ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.670059 env[1729]: 2024-07-02 07:59:09.628 [INFO][5253] dataplane_linux.go 68: Setting the host side veth name to cali88c64a9f7ef ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.670059 env[1729]: 2024-07-02 07:59:09.648 [INFO][5253] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.670059 env[1729]: 2024-07-02 07:59:09.649 [INFO][5253] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0", GenerateName:"calico-apiserver-5f595bb764-", Namespace:"calico-apiserver", SelfLink:"", UID:"e997acb4-0e1e-41d3-865f-197ceac67e2e", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 59, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5f595bb764", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-43", ContainerID:"dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916", Pod:"calico-apiserver-5f595bb764-lqs8x", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.49.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali88c64a9f7ef", MAC:"9a:fb:79:16:00:78", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:59:09.670059 env[1729]: 2024-07-02 07:59:09.666 [INFO][5253] k8s.go 500: Wrote updated endpoint to datastore ContainerID="dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916" Namespace="calico-apiserver" Pod="calico-apiserver-5f595bb764-lqs8x" WorkloadEndpoint="ip--172--31--21--43-k8s-calico--apiserver--5f595bb764--lqs8x-eth0" Jul 2 07:59:09.697215 env[1729]: time="2024-07-02T07:59:09.697111620Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:59:09.697499 env[1729]: time="2024-07-02T07:59:09.697453751Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:59:09.699477 env[1729]: time="2024-07-02T07:59:09.699410244Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:59:09.711107 env[1729]: time="2024-07-02T07:59:09.711037373Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916 pid=5292 runtime=io.containerd.runc.v2 Jul 2 07:59:09.739764 systemd[1]: Started cri-containerd-dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916.scope. Jul 2 07:59:09.760000 audit[5315]: NETFILTER_CFG table=filter:125 family=2 entries=55 op=nft_register_chain pid=5315 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:59:09.760000 audit[5315]: SYSCALL arch=c000003e syscall=46 success=yes exit=27464 a0=3 a1=7fff31b247f0 a2=0 a3=7fff31b247dc items=0 ppid=3955 pid=5315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.760000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:59:09.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.788000 audit: BPF prog-id=183 op=LOAD Jul 2 07:59:09.789000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.789000 audit[5305]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=5292 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.789000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463633831666631636464316431396233313731353566393730396139 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=5292 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463633831666631636464316431396233313731353566393730396139 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.790000 audit: BPF prog-id=184 op=LOAD Jul 2 07:59:09.790000 audit[5305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003ac190 items=0 ppid=5292 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463633831666631636464316431396233313731353566393730396139 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.791000 audit: BPF prog-id=185 op=LOAD Jul 2 07:59:09.791000 audit[5305]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003ac1d8 items=0 ppid=5292 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.791000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463633831666631636464316431396233313731353566393730396139 Jul 2 07:59:09.792000 audit: BPF prog-id=185 op=UNLOAD Jul 2 07:59:09.792000 audit: BPF prog-id=184 op=UNLOAD Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { perfmon } for pid=5305 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit[5305]: AVC avc: denied { bpf } for pid=5305 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:09.792000 audit: BPF prog-id=186 op=LOAD Jul 2 07:59:09.792000 audit[5305]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003ac5e8 items=0 ppid=5292 pid=5305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:09.792000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463633831666631636464316431396233313731353566393730396139 Jul 2 07:59:09.830360 env[1729]: time="2024-07-02T07:59:09.830254823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5f595bb764-lqs8x,Uid:e997acb4-0e1e-41d3-865f-197ceac67e2e,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916\"" Jul 2 07:59:09.834118 env[1729]: time="2024-07-02T07:59:09.834078107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 07:59:11.700814 systemd-networkd[1458]: cali88c64a9f7ef: Gained IPv6LL Jul 2 07:59:12.617888 kernel: kauditd_printk_skb: 79 callbacks suppressed Jul 2 07:59:12.618160 kernel: audit: type=1130 audit(1719907152.607:1339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.43:22-139.178.89.65:56298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:12.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.43:22-139.178.89.65:56298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:12.607883 systemd[1]: Started sshd@22-172.31.21.43:22-139.178.89.65:56298.service. Jul 2 07:59:12.896000 audit[5336]: USER_ACCT pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.903058 sshd[5336]: Accepted publickey for core from 139.178.89.65 port 56298 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:12.904634 kernel: audit: type=1101 audit(1719907152.896:1340): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.905000 audit[5336]: CRED_ACQ pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.913695 kernel: audit: type=1103 audit(1719907152.905:1341): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.931178 kernel: audit: type=1006 audit(1719907152.905:1342): pid=5336 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 2 07:59:12.932227 sshd[5336]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:12.905000 audit[5336]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64f8ed20 a2=3 a3=0 items=0 ppid=1 pid=5336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:12.942647 kernel: audit: type=1300 audit(1719907152.905:1342): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64f8ed20 a2=3 a3=0 items=0 ppid=1 pid=5336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:12.952382 systemd[1]: Started session-23.scope. Jul 2 07:59:12.963646 systemd-logind[1723]: New session 23 of user core. Jul 2 07:59:12.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:12.967640 kernel: audit: type=1327 audit(1719907152.905:1342): proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:12.991099 kernel: audit: type=1105 audit(1719907152.980:1343): pid=5336 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.980000 audit[5336]: USER_START pid=5336 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.990000 audit[5338]: CRED_ACQ pid=5338 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:12.997564 kernel: audit: type=1103 audit(1719907152.990:1344): pid=5338 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:13.664000 audit[5347]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:13.677780 kernel: audit: type=1325 audit(1719907153.664:1345): table=filter:126 family=2 entries=10 op=nft_register_rule pid=5347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:13.678014 kernel: audit: type=1300 audit(1719907153.664:1345): arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc45ff5a20 a2=0 a3=7ffc45ff5a0c items=0 ppid=2928 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:13.664000 audit[5347]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc45ff5a20 a2=0 a3=7ffc45ff5a0c items=0 ppid=2928 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:13.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:13.682024 sshd[5336]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:13.688765 systemd[1]: sshd@22-172.31.21.43:22-139.178.89.65:56298.service: Deactivated successfully. Jul 2 07:59:13.690175 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 07:59:13.685000 audit[5336]: USER_END pid=5336 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:13.685000 audit[5336]: CRED_DISP pid=5336 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:13.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.43:22-139.178.89.65:56298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:13.691489 systemd-logind[1723]: Session 23 logged out. Waiting for processes to exit. Jul 2 07:59:13.700929 systemd-logind[1723]: Removed session 23. Jul 2 07:59:13.704000 audit[5347]: NETFILTER_CFG table=nat:127 family=2 entries=44 op=nft_register_rule pid=5347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:13.704000 audit[5347]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffc45ff5a20 a2=0 a3=7ffc45ff5a0c items=0 ppid=2928 pid=5347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:13.704000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:14.191035 env[1729]: time="2024-07-02T07:59:14.190990138Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:59:14.195349 env[1729]: time="2024-07-02T07:59:14.195291780Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:59:14.198409 env[1729]: time="2024-07-02T07:59:14.198362048Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:59:14.200729 env[1729]: time="2024-07-02T07:59:14.200690151Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:59:14.201247 env[1729]: time="2024-07-02T07:59:14.201211456Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 07:59:14.208748 env[1729]: time="2024-07-02T07:59:14.208690014Z" level=info msg="CreateContainer within sandbox \"dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 07:59:14.229395 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount313495311.mount: Deactivated successfully. Jul 2 07:59:14.235261 env[1729]: time="2024-07-02T07:59:14.235200480Z" level=info msg="CreateContainer within sandbox \"dcc81ff1cdd1d19b317155f9709a92531568f9bf12d919f97ff1ae53f198a916\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"3fa51efd08758d95e4fbe303b7e381d3ff8f16dda57c4e9963a5241b16601e9b\"" Jul 2 07:59:14.238362 env[1729]: time="2024-07-02T07:59:14.238323216Z" level=info msg="StartContainer for \"3fa51efd08758d95e4fbe303b7e381d3ff8f16dda57c4e9963a5241b16601e9b\"" Jul 2 07:59:14.306832 systemd[1]: Started cri-containerd-3fa51efd08758d95e4fbe303b7e381d3ff8f16dda57c4e9963a5241b16601e9b.scope. Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit: BPF prog-id=187 op=LOAD Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=5292 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613531656664303837353864393565346662653330336237653338 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=5292 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613531656664303837353864393565346662653330336237653338 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.330000 audit: BPF prog-id=188 op=LOAD Jul 2 07:59:14.330000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a2730 items=0 ppid=5292 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613531656664303837353864393565346662653330336237653338 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit: BPF prog-id=189 op=LOAD Jul 2 07:59:14.331000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a2778 items=0 ppid=5292 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613531656664303837353864393565346662653330336237653338 Jul 2 07:59:14.331000 audit: BPF prog-id=189 op=UNLOAD Jul 2 07:59:14.331000 audit: BPF prog-id=188 op=UNLOAD Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { perfmon } for pid=5356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit[5356]: AVC avc: denied { bpf } for pid=5356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:14.331000 audit: BPF prog-id=190 op=LOAD Jul 2 07:59:14.331000 audit[5356]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a2b88 items=0 ppid=5292 pid=5356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366613531656664303837353864393565346662653330336237653338 Jul 2 07:59:14.409905 env[1729]: time="2024-07-02T07:59:14.409774968Z" level=info msg="StartContainer for \"3fa51efd08758d95e4fbe303b7e381d3ff8f16dda57c4e9963a5241b16601e9b\" returns successfully" Jul 2 07:59:14.921000 audit[5391]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:14.921000 audit[5391]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffdea2787a0 a2=0 a3=7ffdea27878c items=0 ppid=2928 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.921000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:14.925000 audit[5391]: NETFILTER_CFG table=nat:129 family=2 entries=44 op=nft_register_rule pid=5391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:14.925000 audit[5391]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffdea2787a0 a2=0 a3=7ffdea27878c items=0 ppid=2928 pid=5391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:14.925000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:15.355000 audit[5368]: AVC avc: denied { watch } for pid=5368 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_07_59_09.486478461/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c107,c367 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c107,c367 tclass=file permissive=0 Jul 2 07:59:15.355000 audit[5368]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000738260 a2=fc6 a3=0 items=0 ppid=5292 pid=5368 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c107,c367 key=(null) Jul 2 07:59:15.355000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 07:59:15.397856 kubelet[2694]: I0702 07:59:15.397797 2694 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5f595bb764-lqs8x" podStartSLOduration=3.019604724 podCreationTimestamp="2024-07-02 07:59:08 +0000 UTC" firstStartedPulling="2024-07-02 07:59:09.832974227 +0000 UTC m=+104.918525146" lastFinishedPulling="2024-07-02 07:59:14.201592937 +0000 UTC m=+109.287143851" observedRunningTime="2024-07-02 07:59:14.752289365 +0000 UTC m=+109.837840311" watchObservedRunningTime="2024-07-02 07:59:15.388223429 +0000 UTC m=+110.473774363" Jul 2 07:59:15.425000 audit[5393]: NETFILTER_CFG table=filter:130 family=2 entries=9 op=nft_register_rule pid=5393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:15.425000 audit[5393]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcc3f624f0 a2=0 a3=7ffcc3f624dc items=0 ppid=2928 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:15.425000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:15.430000 audit[5393]: NETFILTER_CFG table=nat:131 family=2 entries=51 op=nft_register_chain pid=5393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:15.430000 audit[5393]: SYSCALL arch=c000003e syscall=46 success=yes exit=18564 a0=3 a1=7ffcc3f624f0 a2=0 a3=7ffcc3f624dc items=0 ppid=2928 pid=5393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:15.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:17.955582 kernel: kauditd_printk_skb: 79 callbacks suppressed Jul 2 07:59:17.955890 kernel: audit: type=1400 audit(1719907157.947:1374): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:17.947000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:17.947000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:17.962368 kernel: audit: type=1400 audit(1719907157.947:1373): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:17.947000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ba0300 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:17.947000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:17.972627 kernel: audit: type=1300 audit(1719907157.947:1374): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ba0300 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:17.972763 kernel: audit: type=1327 audit(1719907157.947:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:17.972799 kernel: audit: type=1300 audit(1719907157.947:1373): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001b2abd0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:17.947000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001b2abd0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:17.947000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:17.985160 kernel: audit: type=1327 audit(1719907157.947:1373): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:18.708396 systemd[1]: Started sshd@23-172.31.21.43:22-139.178.89.65:34440.service. Jul 2 07:59:18.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.43:22-139.178.89.65:34440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:18.713578 kernel: audit: type=1130 audit(1719907158.708:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.43:22-139.178.89.65:34440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:18.926000 audit[5395]: USER_ACCT pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:18.927857 sshd[5395]: Accepted publickey for core from 139.178.89.65 port 34440 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:18.931000 audit[5395]: CRED_ACQ pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:18.934000 sshd[5395]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:18.936264 kernel: audit: type=1101 audit(1719907158.926:1376): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:18.936349 kernel: audit: type=1103 audit(1719907158.931:1377): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:18.939734 kernel: audit: type=1006 audit(1719907158.931:1378): pid=5395 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 07:59:18.931000 audit[5395]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6ccd3050 a2=3 a3=0 items=0 ppid=1 pid=5395 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:18.931000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:18.944413 systemd-logind[1723]: New session 24 of user core. Jul 2 07:59:18.946447 systemd[1]: Started session-24.scope. Jul 2 07:59:18.954000 audit[5395]: USER_START pid=5395 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:18.957000 audit[5397]: CRED_ACQ pid=5397 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:19.359772 sshd[5395]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:19.360000 audit[5395]: USER_END pid=5395 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:19.360000 audit[5395]: CRED_DISP pid=5395 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:19.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.43:22-139.178.89.65:34440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:19.366309 systemd[1]: sshd@23-172.31.21.43:22-139.178.89.65:34440.service: Deactivated successfully. Jul 2 07:59:19.368841 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 07:59:19.370451 systemd-logind[1723]: Session 24 logged out. Waiting for processes to exit. Jul 2 07:59:19.372233 systemd-logind[1723]: Removed session 24. Jul 2 07:59:19.523000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:19.523000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=6351 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:19.523000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c007a9a8d0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:59:19.523000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:59:19.523000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00e473920 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:59:19.523000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:59:19.523000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:19.523000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00f47bef0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:59:19.523000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:59:19.533000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:19.533000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c004d28860 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:59:19.533000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:59:19.535000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:19.535000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c007a9a930 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:59:19.535000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:59:19.540000 audit[2581]: AVC avc: denied { watch } for pid=2581 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=6357 scontext=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:19.540000 audit[2581]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00747a3c0 a2=fc6 a3=0 items=0 ppid=2420 pid=2581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c4,c857 key=(null) Jul 2 07:59:19.540000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3433002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 07:59:23.470716 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 2 07:59:23.471092 kernel: audit: type=1400 audit(1719907163.463:1390): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.471144 kernel: audit: type=1300 audit(1719907163.463:1390): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ba1a60 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.463000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.463000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ba1a60 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.463000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:23.482326 kernel: audit: type=1327 audit(1719907163.463:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:23.482470 kernel: audit: type=1400 audit(1719907163.471:1391): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.471000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.471000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022c5420 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.492970 kernel: audit: type=1300 audit(1719907163.471:1391): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022c5420 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.494746 kernel: audit: type=1327 audit(1719907163.471:1391): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:23.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:23.472000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.503107 kernel: audit: type=1400 audit(1719907163.472:1392): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.503245 kernel: audit: type=1300 audit(1719907163.472:1392): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022c55c0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.472000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0022c55c0 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:23.513357 kernel: audit: type=1327 audit(1719907163.472:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:23.513559 kernel: audit: type=1400 audit(1719907163.473:1393): avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.473000 audit[2561]: AVC avc: denied { watch } for pid=2561 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:23.473000 audit[2561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ba1c00 a2=fc6 a3=0 items=0 ppid=2423 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:23.473000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:24.385000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.43:22-139.178.89.65:34442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:24.385930 systemd[1]: Started sshd@24-172.31.21.43:22-139.178.89.65:34442.service. Jul 2 07:59:24.563000 audit[5413]: USER_ACCT pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:24.566326 sshd[5413]: Accepted publickey for core from 139.178.89.65 port 34442 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:24.566000 audit[5413]: CRED_ACQ pid=5413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:24.566000 audit[5413]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5941fe50 a2=3 a3=0 items=0 ppid=1 pid=5413 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:24.566000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:24.567959 sshd[5413]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:24.574775 systemd-logind[1723]: New session 25 of user core. Jul 2 07:59:24.575412 systemd[1]: Started session-25.scope. Jul 2 07:59:24.582000 audit[5413]: USER_START pid=5413 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:24.584000 audit[5415]: CRED_ACQ pid=5415 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:24.804116 sshd[5413]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:24.810000 audit[5413]: USER_END pid=5413 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:24.812000 audit[5413]: CRED_DISP pid=5413 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:24.819913 systemd[1]: sshd@24-172.31.21.43:22-139.178.89.65:34442.service: Deactivated successfully. Jul 2 07:59:24.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.43:22-139.178.89.65:34442 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:24.820989 systemd[1]: session-25.scope: Deactivated successfully. Jul 2 07:59:24.822066 systemd-logind[1723]: Session 25 logged out. Waiting for processes to exit. Jul 2 07:59:24.823449 systemd-logind[1723]: Removed session 25. Jul 2 07:59:25.193516 systemd[1]: run-containerd-runc-k8s.io-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2-runc.4YduUH.mount: Deactivated successfully. Jul 2 07:59:26.223000 audit[5447]: NETFILTER_CFG table=filter:132 family=2 entries=8 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:26.223000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffdef3315a0 a2=0 a3=7ffdef33158c items=0 ppid=2928 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:26.223000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:26.226000 audit[5447]: NETFILTER_CFG table=nat:133 family=2 entries=58 op=nft_register_chain pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:59:26.226000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=20452 a0=3 a1=7ffdef3315a0 a2=0 a3=7ffdef33158c items=0 ppid=2928 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:26.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:59:29.836804 systemd[1]: Started sshd@25-172.31.21.43:22-139.178.89.65:55878.service. Jul 2 07:59:29.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.43:22-139.178.89.65:55878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:29.840017 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 2 07:59:29.840369 kernel: audit: type=1130 audit(1719907169.835:1405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.43:22-139.178.89.65:55878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:30.030000 audit[5457]: USER_ACCT pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.037744 sshd[5457]: Accepted publickey for core from 139.178.89.65 port 55878 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:30.041569 kernel: audit: type=1101 audit(1719907170.030:1406): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.040000 audit[5457]: CRED_ACQ pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.044003 sshd[5457]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:30.064771 kernel: audit: type=1103 audit(1719907170.040:1407): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.067574 kernel: audit: type=1006 audit(1719907170.040:1408): pid=5457 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 2 07:59:30.067963 kernel: audit: type=1300 audit(1719907170.040:1408): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeadad8920 a2=3 a3=0 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:30.040000 audit[5457]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeadad8920 a2=3 a3=0 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:30.104609 kernel: audit: type=1327 audit(1719907170.040:1408): proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:30.040000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:30.088403 systemd[1]: Started session-26.scope. Jul 2 07:59:30.103251 systemd-logind[1723]: New session 26 of user core. Jul 2 07:59:30.145274 kernel: audit: type=1105 audit(1719907170.129:1409): pid=5457 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.129000 audit[5457]: USER_START pid=5457 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.144000 audit[5459]: CRED_ACQ pid=5459 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.157585 kernel: audit: type=1103 audit(1719907170.144:1410): pid=5459 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.448075 sshd[5457]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:30.450000 audit[5457]: USER_END pid=5457 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.455000 audit[5457]: CRED_DISP pid=5457 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.461981 systemd[1]: sshd@25-172.31.21.43:22-139.178.89.65:55878.service: Deactivated successfully. Jul 2 07:59:30.463889 systemd[1]: session-26.scope: Deactivated successfully. Jul 2 07:59:30.466068 kernel: audit: type=1106 audit(1719907170.450:1411): pid=5457 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.466283 kernel: audit: type=1104 audit(1719907170.455:1412): pid=5457 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:30.458000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.43:22-139.178.89.65:55878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:30.467417 systemd-logind[1723]: Session 26 logged out. Waiting for processes to exit. Jul 2 07:59:30.468996 systemd-logind[1723]: Removed session 26. Jul 2 07:59:32.439985 systemd[1]: run-containerd-runc-k8s.io-f3e229bc6f04e5b155496f4a28702afd9473e8bd754b483aee92eb787f682c9f-runc.PeJnv1.mount: Deactivated successfully. Jul 2 07:59:35.483816 systemd[1]: Started sshd@26-172.31.21.43:22-139.178.89.65:55888.service. Jul 2 07:59:35.496087 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:59:35.496242 kernel: audit: type=1130 audit(1719907175.485:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.43:22-139.178.89.65:55888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:35.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.43:22-139.178.89.65:55888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:35.766000 audit[5496]: USER_ACCT pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.774807 kernel: audit: type=1101 audit(1719907175.766:1415): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.774864 sshd[5496]: Accepted publickey for core from 139.178.89.65 port 55888 ssh2: RSA SHA256:rTbb9lmT4XUn8uDXgmoYGo7iZpmooGlUi2cnCdowCs4 Jul 2 07:59:35.774000 audit[5496]: CRED_ACQ pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.786575 kernel: audit: type=1103 audit(1719907175.774:1416): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.786849 kernel: audit: type=1006 audit(1719907175.774:1417): pid=5496 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 2 07:59:35.787972 sshd[5496]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:59:35.774000 audit[5496]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe52478590 a2=3 a3=0 items=0 ppid=1 pid=5496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:35.774000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:35.802894 kernel: audit: type=1300 audit(1719907175.774:1417): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe52478590 a2=3 a3=0 items=0 ppid=1 pid=5496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:35.803039 kernel: audit: type=1327 audit(1719907175.774:1417): proctitle=737368643A20636F7265205B707269765D Jul 2 07:59:35.803963 systemd-logind[1723]: New session 27 of user core. Jul 2 07:59:35.805250 systemd[1]: Started session-27.scope. Jul 2 07:59:35.812000 audit[5496]: USER_START pid=5496 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.822421 kernel: audit: type=1105 audit(1719907175.812:1418): pid=5496 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.820000 audit[5498]: CRED_ACQ pid=5498 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:35.828149 kernel: audit: type=1103 audit(1719907175.820:1419): pid=5498 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:36.253856 sshd[5496]: pam_unix(sshd:session): session closed for user core Jul 2 07:59:36.255000 audit[5496]: USER_END pid=5496 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:36.255000 audit[5496]: CRED_DISP pid=5496 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:36.269446 kernel: audit: type=1106 audit(1719907176.255:1420): pid=5496 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:36.269655 kernel: audit: type=1104 audit(1719907176.255:1421): pid=5496 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 2 07:59:36.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.43:22-139.178.89.65:55888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:59:36.267055 systemd[1]: sshd@26-172.31.21.43:22-139.178.89.65:55888.service: Deactivated successfully. Jul 2 07:59:36.268790 systemd[1]: session-27.scope: Deactivated successfully. Jul 2 07:59:36.270118 systemd-logind[1723]: Session 27 logged out. Waiting for processes to exit. Jul 2 07:59:36.271295 systemd-logind[1723]: Removed session 27. Jul 2 07:59:50.515584 systemd[1]: cri-containerd-5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e.scope: Deactivated successfully. Jul 2 07:59:50.515916 systemd[1]: cri-containerd-5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e.scope: Consumed 2.988s CPU time. Jul 2 07:59:50.525000 audit: BPF prog-id=83 op=UNLOAD Jul 2 07:59:50.527145 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 07:59:50.527216 kernel: audit: type=1334 audit(1719907190.525:1423): prog-id=83 op=UNLOAD Jul 2 07:59:50.530519 kernel: audit: type=1334 audit(1719907190.525:1424): prog-id=105 op=UNLOAD Jul 2 07:59:50.525000 audit: BPF prog-id=105 op=UNLOAD Jul 2 07:59:50.604231 env[1729]: time="2024-07-02T07:59:50.604178242Z" level=info msg="shim disconnected" id=5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e Jul 2 07:59:50.604814 env[1729]: time="2024-07-02T07:59:50.604783386Z" level=warning msg="cleaning up after shim disconnected" id=5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e namespace=k8s.io Jul 2 07:59:50.604964 env[1729]: time="2024-07-02T07:59:50.604945597Z" level=info msg="cleaning up dead shim" Jul 2 07:59:50.607477 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e-rootfs.mount: Deactivated successfully. Jul 2 07:59:50.626446 env[1729]: time="2024-07-02T07:59:50.626395074Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:59:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5540 runtime=io.containerd.runc.v2\n" Jul 2 07:59:50.891855 kubelet[2694]: I0702 07:59:50.891691 2694 scope.go:117] "RemoveContainer" containerID="5c15b28a29709c2d443f5316501becd838df756a23baa72b8c69b479a6b38b3e" Jul 2 07:59:50.907832 env[1729]: time="2024-07-02T07:59:50.907784582Z" level=info msg="CreateContainer within sandbox \"60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 2 07:59:50.969013 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount612612208.mount: Deactivated successfully. Jul 2 07:59:50.971747 env[1729]: time="2024-07-02T07:59:50.971603485Z" level=info msg="CreateContainer within sandbox \"60c3751e128ab0676a2e3295a17985041c0082875372305dacacd54bd77c9d5a\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"a0fad69cb1b62350991990c238ae747ac383f52fb9952225dd7303c4b323914d\"" Jul 2 07:59:50.972344 env[1729]: time="2024-07-02T07:59:50.972304090Z" level=info msg="StartContainer for \"a0fad69cb1b62350991990c238ae747ac383f52fb9952225dd7303c4b323914d\"" Jul 2 07:59:51.009969 systemd[1]: Started cri-containerd-a0fad69cb1b62350991990c238ae747ac383f52fb9952225dd7303c4b323914d.scope. Jul 2 07:59:51.050015 kernel: audit: type=1400 audit(1719907191.037:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.050178 kernel: audit: type=1400 audit(1719907191.037:1426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.050221 kernel: audit: type=1400 audit(1719907191.037:1427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.054684 kernel: audit: type=1400 audit(1719907191.037:1428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.062302 kernel: audit: type=1400 audit(1719907191.037:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.062735 kernel: audit: type=1400 audit(1719907191.037:1430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.062771 kernel: audit: type=1400 audit(1719907191.037:1431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.066192 kernel: audit: type=1400 audit(1719907191.037:1432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit: BPF prog-id=191 op=LOAD Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2423 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:51.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130666164363963623162363233353039393139393063323338616537 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2423 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:51.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130666164363963623162363233353039393139393063323338616537 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.038000 audit: BPF prog-id=192 op=LOAD Jul 2 07:59:51.038000 audit[5561]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00025fed0 items=0 ppid=2423 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:51.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130666164363963623162363233353039393139393063323338616537 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.042000 audit: BPF prog-id=193 op=LOAD Jul 2 07:59:51.042000 audit[5561]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00025ff18 items=0 ppid=2423 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:51.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130666164363963623162363233353039393139393063323338616537 Jul 2 07:59:51.049000 audit: BPF prog-id=193 op=UNLOAD Jul 2 07:59:51.049000 audit: BPF prog-id=192 op=UNLOAD Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { perfmon } for pid=5561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit[5561]: AVC avc: denied { bpf } for pid=5561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:51.049000 audit: BPF prog-id=194 op=LOAD Jul 2 07:59:51.049000 audit[5561]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ca328 items=0 ppid=2423 pid=5561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:51.049000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130666164363963623162363233353039393139393063323338616537 Jul 2 07:59:51.112192 env[1729]: time="2024-07-02T07:59:51.112122413Z" level=info msg="StartContainer for \"a0fad69cb1b62350991990c238ae747ac383f52fb9952225dd7303c4b323914d\" returns successfully" Jul 2 07:59:51.146138 systemd[1]: cri-containerd-bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279.scope: Deactivated successfully. Jul 2 07:59:51.144000 audit: BPF prog-id=120 op=UNLOAD Jul 2 07:59:51.146466 systemd[1]: cri-containerd-bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279.scope: Consumed 6.594s CPU time. Jul 2 07:59:51.150000 audit: BPF prog-id=123 op=UNLOAD Jul 2 07:59:51.176875 env[1729]: time="2024-07-02T07:59:51.176825892Z" level=info msg="shim disconnected" id=bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279 Jul 2 07:59:51.176875 env[1729]: time="2024-07-02T07:59:51.176876439Z" level=warning msg="cleaning up after shim disconnected" id=bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279 namespace=k8s.io Jul 2 07:59:51.177475 env[1729]: time="2024-07-02T07:59:51.176890229Z" level=info msg="cleaning up dead shim" Jul 2 07:59:51.198028 env[1729]: time="2024-07-02T07:59:51.197970205Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:59:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5599 runtime=io.containerd.runc.v2\n" Jul 2 07:59:51.610467 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279-rootfs.mount: Deactivated successfully. Jul 2 07:59:51.891052 kubelet[2694]: I0702 07:59:51.890951 2694 scope.go:117] "RemoveContainer" containerID="bd49927c83914a1cbb3d3a879e070da41e156cea0d3a8729cbbb2d7c3ce2b279" Jul 2 07:59:51.903830 env[1729]: time="2024-07-02T07:59:51.903591923Z" level=info msg="CreateContainer within sandbox \"c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 2 07:59:51.934787 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4167759898.mount: Deactivated successfully. Jul 2 07:59:51.961680 env[1729]: time="2024-07-02T07:59:51.961617078Z" level=info msg="CreateContainer within sandbox \"c7fb2d30590e52a0cd5772d656c1a029aeb86baf5b07b12a282e48aa24936237\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"80694592e234cea64b334485f8a21c57ec2282f3c0048611ca7f76311af1184a\"" Jul 2 07:59:51.963440 env[1729]: time="2024-07-02T07:59:51.963405200Z" level=info msg="StartContainer for \"80694592e234cea64b334485f8a21c57ec2282f3c0048611ca7f76311af1184a\"" Jul 2 07:59:52.043437 systemd[1]: Started cri-containerd-80694592e234cea64b334485f8a21c57ec2282f3c0048611ca7f76311af1184a.scope. Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.080000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.081000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.081000 audit: BPF prog-id=195 op=LOAD Jul 2 07:59:52.083000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.083000 audit[5629]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3073 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:52.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830363934353932653233346365613634623333343438356638613231 Jul 2 07:59:52.085000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.085000 audit[5629]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3073 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:52.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830363934353932653233346365613634623333343438356638613231 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit: BPF prog-id=196 op=LOAD Jul 2 07:59:52.087000 audit[5629]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a7ac0 items=0 ppid=3073 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:52.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830363934353932653233346365613634623333343438356638613231 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit: BPF prog-id=197 op=LOAD Jul 2 07:59:52.087000 audit[5629]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a7b08 items=0 ppid=3073 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:52.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830363934353932653233346365613634623333343438356638613231 Jul 2 07:59:52.087000 audit: BPF prog-id=197 op=UNLOAD Jul 2 07:59:52.087000 audit: BPF prog-id=196 op=UNLOAD Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { perfmon } for pid=5629 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit[5629]: AVC avc: denied { bpf } for pid=5629 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:52.087000 audit: BPF prog-id=198 op=LOAD Jul 2 07:59:52.087000 audit[5629]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002a7f18 items=0 ppid=3073 pid=5629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:52.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830363934353932653233346365613634623333343438356638613231 Jul 2 07:59:52.132221 env[1729]: time="2024-07-02T07:59:52.132166309Z" level=info msg="StartContainer for \"80694592e234cea64b334485f8a21c57ec2282f3c0048611ca7f76311af1184a\" returns successfully" Jul 2 07:59:53.045000 audit[5573]: AVC avc: denied { watch } for pid=5573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=6355 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:53.045000 audit[5573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00098c030 a2=fc6 a3=0 items=0 ppid=2423 pid=5573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:53.045000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:53.046000 audit[5573]: AVC avc: denied { watch } for pid=5573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=6336 scontext=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:59:53.046000 audit[5573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b663a0 a2=fc6 a3=0 items=0 ppid=2423 pid=5573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c336,c519 key=(null) Jul 2 07:59:53.046000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:59:55.249746 systemd[1]: run-containerd-runc-k8s.io-05e6e3b8be1198221f5617ae119d580f5e11e03d011319eff9728160a650ddd2-runc.SrhFAV.mount: Deactivated successfully. Jul 2 07:59:55.613990 systemd[1]: cri-containerd-7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576.scope: Deactivated successfully. Jul 2 07:59:55.614387 systemd[1]: cri-containerd-7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576.scope: Consumed 2.062s CPU time. Jul 2 07:59:55.625025 kernel: kauditd_printk_skb: 114 callbacks suppressed Jul 2 07:59:55.625178 kernel: audit: type=1334 audit(1719907195.617:1465): prog-id=79 op=UNLOAD Jul 2 07:59:55.625233 kernel: audit: type=1334 audit(1719907195.617:1466): prog-id=91 op=UNLOAD Jul 2 07:59:55.617000 audit: BPF prog-id=79 op=UNLOAD Jul 2 07:59:55.617000 audit: BPF prog-id=91 op=UNLOAD Jul 2 07:59:55.667674 env[1729]: time="2024-07-02T07:59:55.654908068Z" level=info msg="shim disconnected" id=7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576 Jul 2 07:59:55.667674 env[1729]: time="2024-07-02T07:59:55.654967889Z" level=warning msg="cleaning up after shim disconnected" id=7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576 namespace=k8s.io Jul 2 07:59:55.667674 env[1729]: time="2024-07-02T07:59:55.654981170Z" level=info msg="cleaning up dead shim" Jul 2 07:59:55.665235 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576-rootfs.mount: Deactivated successfully. Jul 2 07:59:55.673661 env[1729]: time="2024-07-02T07:59:55.673611562Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:59:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5691 runtime=io.containerd.runc.v2\n" Jul 2 07:59:55.906377 kubelet[2694]: I0702 07:59:55.905442 2694 scope.go:117] "RemoveContainer" containerID="7bcc94197e9e0e812d5f54864bf5c97120157fad6f15642c7ed9dfb693de0576" Jul 2 07:59:55.914856 env[1729]: time="2024-07-02T07:59:55.914800933Z" level=info msg="CreateContainer within sandbox \"5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 2 07:59:55.943828 env[1729]: time="2024-07-02T07:59:55.943757790Z" level=info msg="CreateContainer within sandbox \"5f45c22704dbdd7728189a7e6956d864e5334ecd6089e30afb7feb16b555ba96\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"2861483c88a404f66a369c119050214d14307128523e5d5319eb21961220bf51\"" Jul 2 07:59:55.944608 env[1729]: time="2024-07-02T07:59:55.944542947Z" level=info msg="StartContainer for \"2861483c88a404f66a369c119050214d14307128523e5d5319eb21961220bf51\"" Jul 2 07:59:55.968233 systemd[1]: Started cri-containerd-2861483c88a404f66a369c119050214d14307128523e5d5319eb21961220bf51.scope. Jul 2 07:59:55.994072 kernel: audit: type=1400 audit(1719907195.986:1467): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.994294 kernel: audit: type=1400 audit(1719907195.986:1468): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:56.002494 kernel: audit: type=1400 audit(1719907195.986:1469): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:56.002637 kernel: audit: type=1400 audit(1719907195.986:1470): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:56.009374 kernel: audit: type=1400 audit(1719907195.986:1471): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:56.009504 kernel: audit: type=1400 audit(1719907195.986:1472): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:56.017910 kernel: audit: type=1400 audit(1719907195.986:1473): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:56.018057 kernel: audit: type=1400 audit(1719907195.986:1474): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit: BPF prog-id=199 op=LOAD Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014bc48 a2=10 a3=1c items=0 ppid=2380 pid=5712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:55.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238363134383363383861343034663636613336396331313930353032 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014b6b0 a2=3c a3=8 items=0 ppid=2380 pid=5712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:55.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238363134383363383861343034663636613336396331313930353032 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit: BPF prog-id=200 op=LOAD Jul 2 07:59:55.993000 audit[5712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014b9d8 a2=78 a3=c000284960 items=0 ppid=2380 pid=5712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:55.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238363134383363383861343034663636613336396331313930353032 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit: BPF prog-id=201 op=LOAD Jul 2 07:59:55.993000 audit[5712]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014b770 a2=78 a3=c0002849a8 items=0 ppid=2380 pid=5712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:55.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238363134383363383861343034663636613336396331313930353032 Jul 2 07:59:55.993000 audit: BPF prog-id=201 op=UNLOAD Jul 2 07:59:55.993000 audit: BPF prog-id=200 op=UNLOAD Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { perfmon } for pid=5712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit[5712]: AVC avc: denied { bpf } for pid=5712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:59:55.993000 audit: BPF prog-id=202 op=LOAD Jul 2 07:59:55.993000 audit[5712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014bc30 a2=78 a3=c000284db8 items=0 ppid=2380 pid=5712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:59:55.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238363134383363383861343034663636613336396331313930353032 Jul 2 07:59:56.057764 env[1729]: time="2024-07-02T07:59:56.056758554Z" level=info msg="StartContainer for \"2861483c88a404f66a369c119050214d14307128523e5d5319eb21961220bf51\" returns successfully" Jul 2 07:59:58.083230 kubelet[2694]: E0702 07:59:58.083176 2694 controller.go:193] "Failed to update lease" err="Put \"https://172.31.21.43:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-43?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 2 08:00:08.084648 kubelet[2694]: E0702 08:00:08.084307 2694 controller.go:193] "Failed to update lease" err="Put \"https://172.31.21.43:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-43?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"