Jul 2 08:42:04.948306 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 1 23:45:21 -00 2024 Jul 2 08:42:04.948326 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 08:42:04.948338 kernel: BIOS-provided physical RAM map: Jul 2 08:42:04.948345 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 2 08:42:04.948351 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 2 08:42:04.948358 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 2 08:42:04.948365 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Jul 2 08:42:04.948372 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Jul 2 08:42:04.948381 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 2 08:42:04.948387 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 2 08:42:04.948394 kernel: NX (Execute Disable) protection: active Jul 2 08:42:04.948400 kernel: SMBIOS 2.8 present. Jul 2 08:42:04.948406 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Jul 2 08:42:04.948413 kernel: Hypervisor detected: KVM Jul 2 08:42:04.948421 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 2 08:42:04.948429 kernel: kvm-clock: cpu 0, msr 3b192001, primary cpu clock Jul 2 08:42:04.948436 kernel: kvm-clock: using sched offset of 4908613742 cycles Jul 2 08:42:04.948444 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 2 08:42:04.948452 kernel: tsc: Detected 1996.249 MHz processor Jul 2 08:42:04.950493 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 2 08:42:04.950507 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 2 08:42:04.950515 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Jul 2 08:42:04.950522 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 2 08:42:04.950534 kernel: ACPI: Early table checksum verification disabled Jul 2 08:42:04.950541 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Jul 2 08:42:04.950549 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:42:04.950556 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:42:04.950563 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:42:04.950570 kernel: ACPI: FACS 0x000000007FFE0000 000040 Jul 2 08:42:04.950578 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:42:04.950585 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 08:42:04.950592 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Jul 2 08:42:04.950601 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Jul 2 08:42:04.950609 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Jul 2 08:42:04.950616 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Jul 2 08:42:04.950623 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Jul 2 08:42:04.950630 kernel: No NUMA configuration found Jul 2 08:42:04.950637 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Jul 2 08:42:04.950644 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Jul 2 08:42:04.950652 kernel: Zone ranges: Jul 2 08:42:04.950663 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 2 08:42:04.950671 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Jul 2 08:42:04.950679 kernel: Normal empty Jul 2 08:42:04.950687 kernel: Movable zone start for each node Jul 2 08:42:04.950694 kernel: Early memory node ranges Jul 2 08:42:04.950702 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 2 08:42:04.950711 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Jul 2 08:42:04.950718 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Jul 2 08:42:04.950726 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 08:42:04.950733 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 2 08:42:04.950741 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Jul 2 08:42:04.950748 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 2 08:42:04.950755 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 2 08:42:04.950763 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 2 08:42:04.950770 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 2 08:42:04.950779 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 2 08:42:04.950787 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 2 08:42:04.950794 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 2 08:42:04.950802 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 2 08:42:04.950809 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 2 08:42:04.950817 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Jul 2 08:42:04.950824 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Jul 2 08:42:04.950831 kernel: Booting paravirtualized kernel on KVM Jul 2 08:42:04.950839 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 2 08:42:04.950847 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Jul 2 08:42:04.950856 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Jul 2 08:42:04.950864 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Jul 2 08:42:04.950871 kernel: pcpu-alloc: [0] 0 1 Jul 2 08:42:04.950878 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Jul 2 08:42:04.950886 kernel: kvm-guest: PV spinlocks disabled, no host support Jul 2 08:42:04.950894 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Jul 2 08:42:04.950901 kernel: Policy zone: DMA32 Jul 2 08:42:04.950910 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 08:42:04.950920 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 08:42:04.950928 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 08:42:04.950936 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 2 08:42:04.950943 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 08:42:04.950951 kernel: Memory: 1973284K/2096620K available (12294K kernel code, 2276K rwdata, 13712K rodata, 47444K init, 4144K bss, 123076K reserved, 0K cma-reserved) Jul 2 08:42:04.950959 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Jul 2 08:42:04.950966 kernel: ftrace: allocating 34514 entries in 135 pages Jul 2 08:42:04.950974 kernel: ftrace: allocated 135 pages with 4 groups Jul 2 08:42:04.950983 kernel: rcu: Hierarchical RCU implementation. Jul 2 08:42:04.950991 kernel: rcu: RCU event tracing is enabled. Jul 2 08:42:04.950999 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Jul 2 08:42:04.951007 kernel: Rude variant of Tasks RCU enabled. Jul 2 08:42:04.951014 kernel: Tracing variant of Tasks RCU enabled. Jul 2 08:42:04.951022 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 08:42:04.951029 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Jul 2 08:42:04.951049 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Jul 2 08:42:04.951057 kernel: Console: colour VGA+ 80x25 Jul 2 08:42:04.951066 kernel: printk: console [tty0] enabled Jul 2 08:42:04.951074 kernel: printk: console [ttyS0] enabled Jul 2 08:42:04.951082 kernel: ACPI: Core revision 20210730 Jul 2 08:42:04.951089 kernel: APIC: Switch to symmetric I/O mode setup Jul 2 08:42:04.951096 kernel: x2apic enabled Jul 2 08:42:04.951104 kernel: Switched APIC routing to physical x2apic. Jul 2 08:42:04.951116 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 2 08:42:04.951127 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 2 08:42:04.951139 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Jul 2 08:42:04.951151 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Jul 2 08:42:04.951165 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Jul 2 08:42:04.951177 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 2 08:42:04.951188 kernel: Spectre V2 : Mitigation: Retpolines Jul 2 08:42:04.951198 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Jul 2 08:42:04.951209 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Jul 2 08:42:04.951220 kernel: Speculative Store Bypass: Vulnerable Jul 2 08:42:04.951231 kernel: x86/fpu: x87 FPU will use FXSAVE Jul 2 08:42:04.951241 kernel: Freeing SMP alternatives memory: 32K Jul 2 08:42:04.951252 kernel: pid_max: default: 32768 minimum: 301 Jul 2 08:42:04.951265 kernel: LSM: Security Framework initializing Jul 2 08:42:04.951275 kernel: SELinux: Initializing. Jul 2 08:42:04.951285 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 08:42:04.951296 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 2 08:42:04.951306 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Jul 2 08:42:04.951316 kernel: Performance Events: AMD PMU driver. Jul 2 08:42:04.951326 kernel: ... version: 0 Jul 2 08:42:04.951336 kernel: ... bit width: 48 Jul 2 08:42:04.951346 kernel: ... generic registers: 4 Jul 2 08:42:04.951366 kernel: ... value mask: 0000ffffffffffff Jul 2 08:42:04.951377 kernel: ... max period: 00007fffffffffff Jul 2 08:42:04.951390 kernel: ... fixed-purpose events: 0 Jul 2 08:42:04.951403 kernel: ... event mask: 000000000000000f Jul 2 08:42:04.951415 kernel: signal: max sigframe size: 1440 Jul 2 08:42:04.951428 kernel: rcu: Hierarchical SRCU implementation. Jul 2 08:42:04.951437 kernel: smp: Bringing up secondary CPUs ... Jul 2 08:42:04.951445 kernel: x86: Booting SMP configuration: Jul 2 08:42:04.951456 kernel: .... node #0, CPUs: #1 Jul 2 08:42:04.951486 kernel: kvm-clock: cpu 1, msr 3b192041, secondary cpu clock Jul 2 08:42:04.951494 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Jul 2 08:42:04.951502 kernel: smp: Brought up 1 node, 2 CPUs Jul 2 08:42:04.951510 kernel: smpboot: Max logical packages: 2 Jul 2 08:42:04.951518 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Jul 2 08:42:04.951526 kernel: devtmpfs: initialized Jul 2 08:42:04.951534 kernel: x86/mm: Memory block size: 128MB Jul 2 08:42:04.951542 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 08:42:04.951552 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Jul 2 08:42:04.951560 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 08:42:04.951568 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 08:42:04.951576 kernel: audit: initializing netlink subsys (disabled) Jul 2 08:42:04.951584 kernel: audit: type=2000 audit(1719909723.669:1): state=initialized audit_enabled=0 res=1 Jul 2 08:42:04.951591 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 08:42:04.951599 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 2 08:42:04.951607 kernel: cpuidle: using governor menu Jul 2 08:42:04.951615 kernel: ACPI: bus type PCI registered Jul 2 08:42:04.951624 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 08:42:04.951632 kernel: dca service started, version 1.12.1 Jul 2 08:42:04.951640 kernel: PCI: Using configuration type 1 for base access Jul 2 08:42:04.951648 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 2 08:42:04.951656 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 08:42:04.951664 kernel: ACPI: Added _OSI(Module Device) Jul 2 08:42:04.951672 kernel: ACPI: Added _OSI(Processor Device) Jul 2 08:42:04.951679 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 08:42:04.951687 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 08:42:04.951697 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 08:42:04.951705 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 08:42:04.951713 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 08:42:04.951739 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 2 08:42:04.951748 kernel: ACPI: Interpreter enabled Jul 2 08:42:04.951756 kernel: ACPI: PM: (supports S0 S3 S5) Jul 2 08:42:04.951763 kernel: ACPI: Using IOAPIC for interrupt routing Jul 2 08:42:04.951771 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 2 08:42:04.951779 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Jul 2 08:42:04.951789 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 2 08:42:04.951944 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Jul 2 08:42:04.952030 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Jul 2 08:42:04.952043 kernel: acpiphp: Slot [3] registered Jul 2 08:42:04.952051 kernel: acpiphp: Slot [4] registered Jul 2 08:42:04.952059 kernel: acpiphp: Slot [5] registered Jul 2 08:42:04.952067 kernel: acpiphp: Slot [6] registered Jul 2 08:42:04.952078 kernel: acpiphp: Slot [7] registered Jul 2 08:42:04.952086 kernel: acpiphp: Slot [8] registered Jul 2 08:42:04.952093 kernel: acpiphp: Slot [9] registered Jul 2 08:42:04.952101 kernel: acpiphp: Slot [10] registered Jul 2 08:42:04.952109 kernel: acpiphp: Slot [11] registered Jul 2 08:42:04.952117 kernel: acpiphp: Slot [12] registered Jul 2 08:42:04.952125 kernel: acpiphp: Slot [13] registered Jul 2 08:42:04.952132 kernel: acpiphp: Slot [14] registered Jul 2 08:42:04.952140 kernel: acpiphp: Slot [15] registered Jul 2 08:42:04.952148 kernel: acpiphp: Slot [16] registered Jul 2 08:42:04.952158 kernel: acpiphp: Slot [17] registered Jul 2 08:42:04.952165 kernel: acpiphp: Slot [18] registered Jul 2 08:42:04.952173 kernel: acpiphp: Slot [19] registered Jul 2 08:42:04.952181 kernel: acpiphp: Slot [20] registered Jul 2 08:42:04.952189 kernel: acpiphp: Slot [21] registered Jul 2 08:42:04.952197 kernel: acpiphp: Slot [22] registered Jul 2 08:42:04.952205 kernel: acpiphp: Slot [23] registered Jul 2 08:42:04.952214 kernel: acpiphp: Slot [24] registered Jul 2 08:42:04.952223 kernel: acpiphp: Slot [25] registered Jul 2 08:42:04.952233 kernel: acpiphp: Slot [26] registered Jul 2 08:42:04.952241 kernel: acpiphp: Slot [27] registered Jul 2 08:42:04.952249 kernel: acpiphp: Slot [28] registered Jul 2 08:42:04.952258 kernel: acpiphp: Slot [29] registered Jul 2 08:42:04.952266 kernel: acpiphp: Slot [30] registered Jul 2 08:42:04.952274 kernel: acpiphp: Slot [31] registered Jul 2 08:42:04.952282 kernel: PCI host bridge to bus 0000:00 Jul 2 08:42:04.952385 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 2 08:42:04.952486 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 2 08:42:04.952584 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 2 08:42:04.952670 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Jul 2 08:42:04.952747 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Jul 2 08:42:04.952824 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 2 08:42:04.952930 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Jul 2 08:42:04.953027 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Jul 2 08:42:04.953131 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Jul 2 08:42:04.953221 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Jul 2 08:42:04.953330 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 2 08:42:04.960785 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 2 08:42:04.960942 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 2 08:42:04.961028 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 2 08:42:04.961118 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Jul 2 08:42:04.961208 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Jul 2 08:42:04.961287 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Jul 2 08:42:04.961382 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Jul 2 08:42:04.961497 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Jul 2 08:42:04.961585 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Jul 2 08:42:04.961666 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Jul 2 08:42:04.961751 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Jul 2 08:42:04.961831 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 2 08:42:04.961919 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Jul 2 08:42:04.962001 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Jul 2 08:42:04.962082 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Jul 2 08:42:04.962162 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Jul 2 08:42:04.962242 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Jul 2 08:42:04.962332 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Jul 2 08:42:04.962414 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Jul 2 08:42:04.964540 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Jul 2 08:42:04.964629 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Jul 2 08:42:04.964722 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Jul 2 08:42:04.964804 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Jul 2 08:42:04.964884 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Jul 2 08:42:04.964974 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Jul 2 08:42:04.965055 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Jul 2 08:42:04.965134 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Jul 2 08:42:04.965146 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 2 08:42:04.965155 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 2 08:42:04.965163 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 2 08:42:04.965171 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 2 08:42:04.965180 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jul 2 08:42:04.965190 kernel: iommu: Default domain type: Translated Jul 2 08:42:04.965198 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 2 08:42:04.965278 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Jul 2 08:42:04.965359 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 2 08:42:04.965442 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Jul 2 08:42:04.965454 kernel: vgaarb: loaded Jul 2 08:42:04.965484 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 08:42:04.965492 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 08:42:04.965500 kernel: PTP clock support registered Jul 2 08:42:04.965511 kernel: PCI: Using ACPI for IRQ routing Jul 2 08:42:04.965519 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 2 08:42:04.965527 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 2 08:42:04.965536 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Jul 2 08:42:04.965543 kernel: clocksource: Switched to clocksource kvm-clock Jul 2 08:42:04.965551 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 08:42:04.965559 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 08:42:04.965567 kernel: pnp: PnP ACPI init Jul 2 08:42:04.965654 kernel: pnp 00:03: [dma 2] Jul 2 08:42:04.965670 kernel: pnp: PnP ACPI: found 5 devices Jul 2 08:42:04.965679 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 2 08:42:04.965687 kernel: NET: Registered PF_INET protocol family Jul 2 08:42:04.965695 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 08:42:04.965703 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 2 08:42:04.965711 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 08:42:04.965720 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 2 08:42:04.965728 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 2 08:42:04.965737 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 2 08:42:04.965746 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 08:42:04.965754 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 2 08:42:04.965762 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 08:42:04.965770 kernel: NET: Registered PF_XDP protocol family Jul 2 08:42:04.965845 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 2 08:42:04.965920 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 2 08:42:04.965991 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 2 08:42:04.966061 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Jul 2 08:42:04.966136 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Jul 2 08:42:04.966218 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Jul 2 08:42:04.966306 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 2 08:42:04.966390 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Jul 2 08:42:04.966403 kernel: PCI: CLS 0 bytes, default 64 Jul 2 08:42:04.966412 kernel: Initialise system trusted keyrings Jul 2 08:42:04.966421 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 2 08:42:04.966440 kernel: Key type asymmetric registered Jul 2 08:42:04.966448 kernel: Asymmetric key parser 'x509' registered Jul 2 08:42:04.966474 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 08:42:04.966484 kernel: io scheduler mq-deadline registered Jul 2 08:42:04.966493 kernel: io scheduler kyber registered Jul 2 08:42:04.966501 kernel: io scheduler bfq registered Jul 2 08:42:04.966510 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 2 08:42:04.966519 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Jul 2 08:42:04.966528 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Jul 2 08:42:04.966536 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Jul 2 08:42:04.966548 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Jul 2 08:42:04.966557 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 08:42:04.966566 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 2 08:42:04.966574 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 2 08:42:04.966583 kernel: random: crng init done Jul 2 08:42:04.966592 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 2 08:42:04.966600 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 2 08:42:04.966609 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 2 08:42:04.966706 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 2 08:42:04.966793 kernel: rtc_cmos 00:04: registered as rtc0 Jul 2 08:42:04.966872 kernel: rtc_cmos 00:04: setting system clock to 2024-07-02T08:42:04 UTC (1719909724) Jul 2 08:42:04.966950 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Jul 2 08:42:04.966962 kernel: NET: Registered PF_INET6 protocol family Jul 2 08:42:04.966971 kernel: Segment Routing with IPv6 Jul 2 08:42:04.966979 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 08:42:04.966988 kernel: NET: Registered PF_PACKET protocol family Jul 2 08:42:04.966996 kernel: Key type dns_resolver registered Jul 2 08:42:04.967008 kernel: IPI shorthand broadcast: enabled Jul 2 08:42:04.967016 kernel: sched_clock: Marking stable (702347434, 119448177)->(848241757, -26446146) Jul 2 08:42:04.967025 kernel: registered taskstats version 1 Jul 2 08:42:04.967033 kernel: Loading compiled-in X.509 certificates Jul 2 08:42:04.967060 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: a1ce693884775675566f1ed116e36d15950b9a42' Jul 2 08:42:04.967069 kernel: Key type .fscrypt registered Jul 2 08:42:04.967077 kernel: Key type fscrypt-provisioning registered Jul 2 08:42:04.967086 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 08:42:04.967096 kernel: ima: Allocated hash algorithm: sha1 Jul 2 08:42:04.967105 kernel: ima: No architecture policies found Jul 2 08:42:04.967113 kernel: clk: Disabling unused clocks Jul 2 08:42:04.967121 kernel: Freeing unused kernel image (initmem) memory: 47444K Jul 2 08:42:04.967130 kernel: Write protecting the kernel read-only data: 28672k Jul 2 08:42:04.967139 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 2 08:42:04.967147 kernel: Freeing unused kernel image (rodata/data gap) memory: 624K Jul 2 08:42:04.967156 kernel: Run /init as init process Jul 2 08:42:04.967165 kernel: with arguments: Jul 2 08:42:04.967176 kernel: /init Jul 2 08:42:04.967183 kernel: with environment: Jul 2 08:42:04.967191 kernel: HOME=/ Jul 2 08:42:04.967199 kernel: TERM=linux Jul 2 08:42:04.967207 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 08:42:04.967219 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 08:42:04.967231 systemd[1]: Detected virtualization kvm. Jul 2 08:42:04.967240 systemd[1]: Detected architecture x86-64. Jul 2 08:42:04.967250 systemd[1]: Running in initrd. Jul 2 08:42:04.967258 systemd[1]: No hostname configured, using default hostname. Jul 2 08:42:04.967267 systemd[1]: Hostname set to . Jul 2 08:42:04.967278 systemd[1]: Initializing machine ID from VM UUID. Jul 2 08:42:04.967287 systemd[1]: Queued start job for default target initrd.target. Jul 2 08:42:04.967296 systemd[1]: Started systemd-ask-password-console.path. Jul 2 08:42:04.967305 systemd[1]: Reached target cryptsetup.target. Jul 2 08:42:04.967314 systemd[1]: Reached target paths.target. Jul 2 08:42:04.967325 systemd[1]: Reached target slices.target. Jul 2 08:42:04.967334 systemd[1]: Reached target swap.target. Jul 2 08:42:04.967343 systemd[1]: Reached target timers.target. Jul 2 08:42:04.967352 systemd[1]: Listening on iscsid.socket. Jul 2 08:42:04.967361 systemd[1]: Listening on iscsiuio.socket. Jul 2 08:42:04.967370 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 08:42:04.967380 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 08:42:04.967389 systemd[1]: Listening on systemd-journald.socket. Jul 2 08:42:04.967399 systemd[1]: Listening on systemd-networkd.socket. Jul 2 08:42:04.967408 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 08:42:04.967417 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 08:42:04.967427 systemd[1]: Reached target sockets.target. Jul 2 08:42:04.967443 systemd[1]: Starting kmod-static-nodes.service... Jul 2 08:42:04.967454 systemd[1]: Finished network-cleanup.service. Jul 2 08:42:04.975495 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 08:42:04.975505 systemd[1]: Starting systemd-journald.service... Jul 2 08:42:04.975515 systemd[1]: Starting systemd-modules-load.service... Jul 2 08:42:04.975524 systemd[1]: Starting systemd-resolved.service... Jul 2 08:42:04.975533 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 08:42:04.975542 systemd[1]: Finished kmod-static-nodes.service. Jul 2 08:42:04.975551 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 08:42:04.975560 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 08:42:04.975572 systemd-journald[186]: Journal started Jul 2 08:42:04.975624 systemd-journald[186]: Runtime Journal (/run/log/journal/0dbe5e3d2115483c91280fdd09cf58eb) is 4.9M, max 39.5M, 34.5M free. Jul 2 08:42:04.956165 systemd-resolved[188]: Positive Trust Anchors: Jul 2 08:42:04.956174 systemd-resolved[188]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 08:42:05.005588 systemd[1]: Started systemd-resolved.service. Jul 2 08:42:04.956213 systemd-resolved[188]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 08:42:04.957727 systemd-modules-load[187]: Inserted module 'overlay' Jul 2 08:42:04.959013 systemd-resolved[188]: Defaulting to hostname 'linux'. Jul 2 08:42:05.017755 systemd[1]: Started systemd-journald.service. Jul 2 08:42:05.017772 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 08:42:05.017788 kernel: audit: type=1130 audit(1719909725.008:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.016186 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 08:42:05.016771 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 08:42:05.019134 systemd[1]: Reached target nss-lookup.target. Jul 2 08:42:05.043636 kernel: audit: type=1130 audit(1719909725.015:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.043663 kernel: audit: type=1130 audit(1719909725.016:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.043676 kernel: audit: type=1130 audit(1719909725.016:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.043687 kernel: Bridge firewalling registered Jul 2 08:42:05.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.041167 systemd-modules-load[187]: Inserted module 'br_netfilter' Jul 2 08:42:05.042433 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 08:42:05.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.058863 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 08:42:05.067393 kernel: audit: type=1130 audit(1719909725.058:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.067417 kernel: SCSI subsystem initialized Jul 2 08:42:05.060201 systemd[1]: Starting dracut-cmdline.service... Jul 2 08:42:05.073487 dracut-cmdline[202]: dracut-dracut-053 Jul 2 08:42:05.076281 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 08:42:05.083768 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 08:42:05.083803 kernel: device-mapper: uevent: version 1.0.3 Jul 2 08:42:05.085328 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 08:42:05.088605 systemd-modules-load[187]: Inserted module 'dm_multipath' Jul 2 08:42:05.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.090024 systemd[1]: Finished systemd-modules-load.service. Jul 2 08:42:05.095593 kernel: audit: type=1130 audit(1719909725.090:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.091265 systemd[1]: Starting systemd-sysctl.service... Jul 2 08:42:05.100846 systemd[1]: Finished systemd-sysctl.service. Jul 2 08:42:05.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.105750 kernel: audit: type=1130 audit(1719909725.100:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.136505 kernel: Loading iSCSI transport class v2.0-870. Jul 2 08:42:05.156489 kernel: iscsi: registered transport (tcp) Jul 2 08:42:05.182501 kernel: iscsi: registered transport (qla4xxx) Jul 2 08:42:05.182538 kernel: QLogic iSCSI HBA Driver Jul 2 08:42:05.218005 systemd[1]: Finished dracut-cmdline.service. Jul 2 08:42:05.224622 kernel: audit: type=1130 audit(1719909725.218:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.219570 systemd[1]: Starting dracut-pre-udev.service... Jul 2 08:42:05.296586 kernel: raid6: sse2x4 gen() 5270 MB/s Jul 2 08:42:05.313598 kernel: raid6: sse2x4 xor() 6607 MB/s Jul 2 08:42:05.330562 kernel: raid6: sse2x2 gen() 14535 MB/s Jul 2 08:42:05.347546 kernel: raid6: sse2x2 xor() 8639 MB/s Jul 2 08:42:05.364574 kernel: raid6: sse2x1 gen() 10848 MB/s Jul 2 08:42:05.382451 kernel: raid6: sse2x1 xor() 6659 MB/s Jul 2 08:42:05.382565 kernel: raid6: using algorithm sse2x2 gen() 14535 MB/s Jul 2 08:42:05.382594 kernel: raid6: .... xor() 8639 MB/s, rmw enabled Jul 2 08:42:05.383286 kernel: raid6: using ssse3x2 recovery algorithm Jul 2 08:42:05.399120 kernel: xor: measuring software checksum speed Jul 2 08:42:05.399184 kernel: prefetch64-sse : 18492 MB/sec Jul 2 08:42:05.401634 kernel: generic_sse : 15712 MB/sec Jul 2 08:42:05.401691 kernel: xor: using function: prefetch64-sse (18492 MB/sec) Jul 2 08:42:05.514530 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 2 08:42:05.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.530776 systemd[1]: Finished dracut-pre-udev.service. Jul 2 08:42:05.540884 kernel: audit: type=1130 audit(1719909725.531:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.539000 audit: BPF prog-id=7 op=LOAD Jul 2 08:42:05.540000 audit: BPF prog-id=8 op=LOAD Jul 2 08:42:05.541653 systemd[1]: Starting systemd-udevd.service... Jul 2 08:42:05.573382 systemd-udevd[385]: Using default interface naming scheme 'v252'. Jul 2 08:42:05.585059 systemd[1]: Started systemd-udevd.service. Jul 2 08:42:05.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.593459 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 08:42:05.620396 dracut-pre-trigger[398]: rd.md=0: removing MD RAID activation Jul 2 08:42:05.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.663939 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 08:42:05.667152 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 08:42:05.710124 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 08:42:05.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:05.783493 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Jul 2 08:42:05.790729 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 08:42:05.790761 kernel: GPT:17805311 != 41943039 Jul 2 08:42:05.790773 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 08:42:05.790785 kernel: GPT:17805311 != 41943039 Jul 2 08:42:05.790796 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 08:42:05.792047 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:42:05.812506 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (441) Jul 2 08:42:05.828503 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 08:42:05.875838 kernel: libata version 3.00 loaded. Jul 2 08:42:05.875867 kernel: ata_piix 0000:00:01.1: version 2.13 Jul 2 08:42:05.875999 kernel: scsi host0: ata_piix Jul 2 08:42:05.876113 kernel: scsi host1: ata_piix Jul 2 08:42:05.876209 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Jul 2 08:42:05.876221 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Jul 2 08:42:05.879566 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 08:42:05.880854 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 08:42:05.885408 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 08:42:05.889846 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 08:42:05.892795 systemd[1]: Starting disk-uuid.service... Jul 2 08:42:05.903610 disk-uuid[461]: Primary Header is updated. Jul 2 08:42:05.903610 disk-uuid[461]: Secondary Entries is updated. Jul 2 08:42:05.903610 disk-uuid[461]: Secondary Header is updated. Jul 2 08:42:05.911485 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:42:05.918489 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:42:06.936453 disk-uuid[462]: The operation has completed successfully. Jul 2 08:42:06.938131 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 08:42:07.012600 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 08:42:07.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.012784 systemd[1]: Finished disk-uuid.service. Jul 2 08:42:07.022434 systemd[1]: Starting verity-setup.service... Jul 2 08:42:07.043444 kernel: device-mapper: verity: sha256 using implementation "sha256-ssse3" Jul 2 08:42:07.151622 systemd[1]: Found device dev-mapper-usr.device. Jul 2 08:42:07.155701 systemd[1]: Mounting sysusr-usr.mount... Jul 2 08:42:07.163157 systemd[1]: Finished verity-setup.service. Jul 2 08:42:07.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.336520 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 08:42:07.337245 systemd[1]: Mounted sysusr-usr.mount. Jul 2 08:42:07.338665 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 08:42:07.340377 systemd[1]: Starting ignition-setup.service... Jul 2 08:42:07.342853 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 08:42:07.356789 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 08:42:07.356848 kernel: BTRFS info (device vda6): using free space tree Jul 2 08:42:07.356859 kernel: BTRFS info (device vda6): has skinny extents Jul 2 08:42:07.380490 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 08:42:07.396853 systemd[1]: Finished ignition-setup.service. Jul 2 08:42:07.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.398273 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 08:42:07.475234 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 08:42:07.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.476000 audit: BPF prog-id=9 op=LOAD Jul 2 08:42:07.477119 systemd[1]: Starting systemd-networkd.service... Jul 2 08:42:07.501880 systemd-networkd[632]: lo: Link UP Jul 2 08:42:07.501891 systemd-networkd[632]: lo: Gained carrier Jul 2 08:42:07.502615 systemd-networkd[632]: Enumeration completed Jul 2 08:42:07.503006 systemd-networkd[632]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 08:42:07.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.504500 systemd-networkd[632]: eth0: Link UP Jul 2 08:42:07.504504 systemd-networkd[632]: eth0: Gained carrier Jul 2 08:42:07.504575 systemd[1]: Started systemd-networkd.service. Jul 2 08:42:07.505735 systemd[1]: Reached target network.target. Jul 2 08:42:07.507173 systemd[1]: Starting iscsiuio.service... Jul 2 08:42:07.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.513369 systemd[1]: Started iscsiuio.service. Jul 2 08:42:07.514887 systemd[1]: Starting iscsid.service... Jul 2 08:42:07.518302 iscsid[641]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 08:42:07.518302 iscsid[641]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 08:42:07.518302 iscsid[641]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 08:42:07.518302 iscsid[641]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 08:42:07.518302 iscsid[641]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 08:42:07.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.524631 iscsid[641]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 08:42:07.520591 systemd[1]: Started iscsid.service. Jul 2 08:42:07.522918 systemd[1]: Starting dracut-initqueue.service... Jul 2 08:42:07.526932 systemd-networkd[632]: eth0: DHCPv4 address 172.24.4.178/24, gateway 172.24.4.1 acquired from 172.24.4.1 Jul 2 08:42:07.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.541210 systemd[1]: Finished dracut-initqueue.service. Jul 2 08:42:07.541790 systemd[1]: Reached target remote-fs-pre.target. Jul 2 08:42:07.542218 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 08:42:07.542654 systemd[1]: Reached target remote-fs.target. Jul 2 08:42:07.543887 systemd[1]: Starting dracut-pre-mount.service... Jul 2 08:42:07.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.555423 systemd[1]: Finished dracut-pre-mount.service. Jul 2 08:42:07.696547 ignition[554]: Ignition 2.14.0 Jul 2 08:42:07.697600 ignition[554]: Stage: fetch-offline Jul 2 08:42:07.697770 ignition[554]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:07.697817 ignition[554]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:07.700269 ignition[554]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:07.700563 ignition[554]: parsed url from cmdline: "" Jul 2 08:42:07.700574 ignition[554]: no config URL provided Jul 2 08:42:07.700588 ignition[554]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 08:42:07.704340 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 08:42:07.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:07.700609 ignition[554]: no config at "/usr/lib/ignition/user.ign" Jul 2 08:42:07.700631 ignition[554]: failed to fetch config: resource requires networking Jul 2 08:42:07.708848 systemd[1]: Starting ignition-fetch.service... Jul 2 08:42:07.701514 ignition[554]: Ignition finished successfully Jul 2 08:42:07.726718 ignition[655]: Ignition 2.14.0 Jul 2 08:42:07.726749 ignition[655]: Stage: fetch Jul 2 08:42:07.726979 ignition[655]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:07.727023 ignition[655]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:07.729333 ignition[655]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:07.729594 ignition[655]: parsed url from cmdline: "" Jul 2 08:42:07.729604 ignition[655]: no config URL provided Jul 2 08:42:07.729618 ignition[655]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 08:42:07.729638 ignition[655]: no config at "/usr/lib/ignition/user.ign" Jul 2 08:42:07.735167 ignition[655]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Jul 2 08:42:07.735224 ignition[655]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Jul 2 08:42:07.736096 ignition[655]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Jul 2 08:42:08.060905 ignition[655]: GET result: OK Jul 2 08:42:08.061233 ignition[655]: parsing config with SHA512: a92f4fe29dd1953d9a33bf3b5e10a6fd1a5d93946c2b84a1da539d119007d70751c9a94b2ada53a67bf27f3bec966e8ff34f2d545d3a0b58ba8b8b9104d60caa Jul 2 08:42:08.081787 unknown[655]: fetched base config from "system" Jul 2 08:42:08.082609 unknown[655]: fetched base config from "system" Jul 2 08:42:08.082629 unknown[655]: fetched user config from "openstack" Jul 2 08:42:08.083860 ignition[655]: fetch: fetch complete Jul 2 08:42:08.083874 ignition[655]: fetch: fetch passed Jul 2 08:42:08.086781 systemd[1]: Finished ignition-fetch.service. Jul 2 08:42:08.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.083983 ignition[655]: Ignition finished successfully Jul 2 08:42:08.090623 systemd[1]: Starting ignition-kargs.service... Jul 2 08:42:08.113536 ignition[661]: Ignition 2.14.0 Jul 2 08:42:08.113555 ignition[661]: Stage: kargs Jul 2 08:42:08.113787 ignition[661]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:08.113833 ignition[661]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:08.116084 ignition[661]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:08.118825 ignition[661]: kargs: kargs passed Jul 2 08:42:08.120817 systemd[1]: Finished ignition-kargs.service. Jul 2 08:42:08.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.118922 ignition[661]: Ignition finished successfully Jul 2 08:42:08.133845 systemd[1]: Starting ignition-disks.service... Jul 2 08:42:08.151699 ignition[667]: Ignition 2.14.0 Jul 2 08:42:08.151725 ignition[667]: Stage: disks Jul 2 08:42:08.151980 ignition[667]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:08.152027 ignition[667]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:08.154394 ignition[667]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:08.157084 ignition[667]: disks: disks passed Jul 2 08:42:08.157176 ignition[667]: Ignition finished successfully Jul 2 08:42:08.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.158911 systemd[1]: Finished ignition-disks.service. Jul 2 08:42:08.160608 systemd[1]: Reached target initrd-root-device.target. Jul 2 08:42:08.162599 systemd[1]: Reached target local-fs-pre.target. Jul 2 08:42:08.164867 systemd[1]: Reached target local-fs.target. Jul 2 08:42:08.167114 systemd[1]: Reached target sysinit.target. Jul 2 08:42:08.169310 systemd[1]: Reached target basic.target. Jul 2 08:42:08.173615 systemd[1]: Starting systemd-fsck-root.service... Jul 2 08:42:08.206412 systemd-fsck[675]: ROOT: clean, 614/1628000 files, 124057/1617920 blocks Jul 2 08:42:08.218774 systemd[1]: Finished systemd-fsck-root.service. Jul 2 08:42:08.219000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.221821 systemd[1]: Mounting sysroot.mount... Jul 2 08:42:08.242514 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 08:42:08.243860 systemd[1]: Mounted sysroot.mount. Jul 2 08:42:08.246391 systemd[1]: Reached target initrd-root-fs.target. Jul 2 08:42:08.251271 systemd[1]: Mounting sysroot-usr.mount... Jul 2 08:42:08.254587 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 08:42:08.258247 systemd[1]: Starting flatcar-openstack-hostname.service... Jul 2 08:42:08.259549 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 08:42:08.259613 systemd[1]: Reached target ignition-diskful.target. Jul 2 08:42:08.263239 systemd[1]: Mounted sysroot-usr.mount. Jul 2 08:42:08.273101 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 08:42:08.277413 systemd[1]: Starting initrd-setup-root.service... Jul 2 08:42:08.291541 initrd-setup-root[687]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 08:42:08.304545 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (682) Jul 2 08:42:08.315274 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 08:42:08.315326 kernel: BTRFS info (device vda6): using free space tree Jul 2 08:42:08.315338 kernel: BTRFS info (device vda6): has skinny extents Jul 2 08:42:08.315356 initrd-setup-root[695]: cut: /sysroot/etc/group: No such file or directory Jul 2 08:42:08.322840 initrd-setup-root[716]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 08:42:08.329180 initrd-setup-root[727]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 08:42:08.336852 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 08:42:08.409412 systemd[1]: Finished initrd-setup-root.service. Jul 2 08:42:08.410853 systemd[1]: Starting ignition-mount.service... Jul 2 08:42:08.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.417257 systemd[1]: Starting sysroot-boot.service... Jul 2 08:42:08.420367 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 2 08:42:08.420480 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 2 08:42:08.441763 ignition[749]: INFO : Ignition 2.14.0 Jul 2 08:42:08.441763 ignition[749]: INFO : Stage: mount Jul 2 08:42:08.442897 ignition[749]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:08.442897 ignition[749]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:08.442897 ignition[749]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:08.445368 ignition[749]: INFO : mount: mount passed Jul 2 08:42:08.445368 ignition[749]: INFO : Ignition finished successfully Jul 2 08:42:08.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.444710 systemd[1]: Finished ignition-mount.service. Jul 2 08:42:08.466314 systemd[1]: Finished sysroot-boot.service. Jul 2 08:42:08.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.477433 coreos-metadata[681]: Jul 02 08:42:08.477 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Jul 2 08:42:08.497844 coreos-metadata[681]: Jul 02 08:42:08.497 INFO Fetch successful Jul 2 08:42:08.497844 coreos-metadata[681]: Jul 02 08:42:08.497 INFO wrote hostname ci-3510-3-5-1-a8b80a6678.novalocal to /sysroot/etc/hostname Jul 2 08:42:08.501239 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Jul 2 08:42:08.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:08.501344 systemd[1]: Finished flatcar-openstack-hostname.service. Jul 2 08:42:08.502759 systemd[1]: Starting ignition-files.service... Jul 2 08:42:08.510785 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 08:42:08.519486 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (760) Jul 2 08:42:08.523003 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 08:42:08.523042 kernel: BTRFS info (device vda6): using free space tree Jul 2 08:42:08.523054 kernel: BTRFS info (device vda6): has skinny extents Jul 2 08:42:08.530775 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 08:42:08.541105 ignition[779]: INFO : Ignition 2.14.0 Jul 2 08:42:08.541105 ignition[779]: INFO : Stage: files Jul 2 08:42:08.542170 ignition[779]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:08.542170 ignition[779]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:08.542170 ignition[779]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:08.544592 ignition[779]: DEBUG : files: compiled without relabeling support, skipping Jul 2 08:42:08.545363 ignition[779]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 08:42:08.545363 ignition[779]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 08:42:08.547626 ignition[779]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 08:42:08.548593 ignition[779]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 08:42:08.549569 unknown[779]: wrote ssh authorized keys file for user: core Jul 2 08:42:08.550341 ignition[779]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 08:42:08.550341 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 08:42:08.550341 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 2 08:42:08.591096 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 2 08:42:08.880525 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 08:42:08.880525 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 2 08:42:08.885295 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 08:42:08.885295 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 08:42:08.890576 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 08:42:08.890576 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 08:42:08.890576 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 08:42:08.890576 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 08:42:08.890576 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 08:42:08.901192 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 08:42:08.901192 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 08:42:08.901192 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 08:42:08.901192 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 08:42:08.901192 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 08:42:08.901192 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.30.1-x86-64.raw: attempt #1 Jul 2 08:42:09.431358 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 2 08:42:09.510162 systemd-networkd[632]: eth0: Gained IPv6LL Jul 2 08:42:11.070741 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.30.1-x86-64.raw" Jul 2 08:42:11.072092 ignition[779]: INFO : files: op(b): [started] processing unit "coreos-metadata-sshkeys@.service" Jul 2 08:42:11.072816 ignition[779]: INFO : files: op(b): [finished] processing unit "coreos-metadata-sshkeys@.service" Jul 2 08:42:11.073543 ignition[779]: INFO : files: op(c): [started] processing unit "prepare-helm.service" Jul 2 08:42:11.075215 ignition[779]: INFO : files: op(c): op(d): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 08:42:11.078965 ignition[779]: INFO : files: op(c): op(d): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 08:42:11.078965 ignition[779]: INFO : files: op(c): [finished] processing unit "prepare-helm.service" Jul 2 08:42:11.078965 ignition[779]: INFO : files: op(e): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 08:42:11.078965 ignition[779]: INFO : files: op(e): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Jul 2 08:42:11.078965 ignition[779]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 2 08:42:11.078965 ignition[779]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 08:42:11.085452 ignition[779]: INFO : files: createResultFile: createFiles: op(10): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 08:42:11.085452 ignition[779]: INFO : files: createResultFile: createFiles: op(10): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 08:42:11.085452 ignition[779]: INFO : files: files passed Jul 2 08:42:11.085452 ignition[779]: INFO : Ignition finished successfully Jul 2 08:42:11.090441 systemd[1]: Finished ignition-files.service. Jul 2 08:42:11.099476 kernel: kauditd_printk_skb: 26 callbacks suppressed Jul 2 08:42:11.099497 kernel: audit: type=1130 audit(1719909731.094:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.100562 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 08:42:11.101945 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 08:42:11.107287 systemd[1]: Starting ignition-quench.service... Jul 2 08:42:11.111604 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 08:42:11.111711 systemd[1]: Finished ignition-quench.service. Jul 2 08:42:11.132710 kernel: audit: type=1130 audit(1719909731.112:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.132759 kernel: audit: type=1131 audit(1719909731.112:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.132936 initrd-setup-root-after-ignition[804]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 08:42:11.138579 kernel: audit: type=1130 audit(1719909731.132:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.132174 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 08:42:11.136772 systemd[1]: Reached target ignition-complete.target. Jul 2 08:42:11.139751 systemd[1]: Starting initrd-parse-etc.service... Jul 2 08:42:11.168258 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 08:42:11.168554 systemd[1]: Finished initrd-parse-etc.service. Jul 2 08:42:11.186957 kernel: audit: type=1130 audit(1719909731.170:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.186997 kernel: audit: type=1131 audit(1719909731.170:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.170000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.171216 systemd[1]: Reached target initrd-fs.target. Jul 2 08:42:11.188046 systemd[1]: Reached target initrd.target. Jul 2 08:42:11.189625 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 08:42:11.191397 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 08:42:11.207057 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 08:42:11.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.209787 systemd[1]: Starting initrd-cleanup.service... Jul 2 08:42:11.213007 kernel: audit: type=1130 audit(1719909731.207:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.225007 systemd[1]: Stopped target nss-lookup.target. Jul 2 08:42:11.226054 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 08:42:11.228039 systemd[1]: Stopped target timers.target. Jul 2 08:42:11.229767 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 08:42:11.230062 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 08:42:11.235086 kernel: audit: type=1131 audit(1719909731.231:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.231952 systemd[1]: Stopped target initrd.target. Jul 2 08:42:11.236320 systemd[1]: Stopped target basic.target. Jul 2 08:42:11.237855 systemd[1]: Stopped target ignition-complete.target. Jul 2 08:42:11.239412 systemd[1]: Stopped target ignition-diskful.target. Jul 2 08:42:11.240944 systemd[1]: Stopped target initrd-root-device.target. Jul 2 08:42:11.242557 systemd[1]: Stopped target remote-fs.target. Jul 2 08:42:11.244083 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 08:42:11.245687 systemd[1]: Stopped target sysinit.target. Jul 2 08:42:11.247305 systemd[1]: Stopped target local-fs.target. Jul 2 08:42:11.248935 systemd[1]: Stopped target local-fs-pre.target. Jul 2 08:42:11.250598 systemd[1]: Stopped target swap.target. Jul 2 08:42:11.251996 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 08:42:11.257241 kernel: audit: type=1131 audit(1719909731.253:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.252261 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 08:42:11.253821 systemd[1]: Stopped target cryptsetup.target. Jul 2 08:42:11.263691 kernel: audit: type=1131 audit(1719909731.259:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.258405 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 08:42:11.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.258749 systemd[1]: Stopped dracut-initqueue.service. Jul 2 08:42:11.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.260232 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 08:42:11.260542 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 08:42:11.265098 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 08:42:11.265362 systemd[1]: Stopped ignition-files.service. Jul 2 08:42:11.268564 systemd[1]: Stopping ignition-mount.service... Jul 2 08:42:11.270744 iscsid[641]: iscsid shutting down. Jul 2 08:42:11.277650 systemd[1]: Stopping iscsid.service... Jul 2 08:42:11.279891 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 08:42:11.280909 ignition[817]: INFO : Ignition 2.14.0 Jul 2 08:42:11.281793 ignition[817]: INFO : Stage: umount Jul 2 08:42:11.281793 ignition[817]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 2 08:42:11.281793 ignition[817]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Jul 2 08:42:11.281141 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 08:42:11.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.287801 ignition[817]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Jul 2 08:42:11.287801 ignition[817]: INFO : umount: umount passed Jul 2 08:42:11.287801 ignition[817]: INFO : Ignition finished successfully Jul 2 08:42:11.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.288405 systemd[1]: Stopping sysroot-boot.service... Jul 2 08:42:11.289644 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 08:42:11.289943 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 08:42:11.291315 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 08:42:11.295199 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 08:42:11.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.299724 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 08:42:11.299828 systemd[1]: Stopped iscsid.service. Jul 2 08:42:11.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.304800 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 08:42:11.304879 systemd[1]: Stopped ignition-mount.service. Jul 2 08:42:11.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.310293 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 08:42:11.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.310403 systemd[1]: Stopped ignition-disks.service. Jul 2 08:42:11.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.310876 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 08:42:11.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.310912 systemd[1]: Stopped ignition-kargs.service. Jul 2 08:42:11.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.311895 systemd[1]: ignition-fetch.service: Deactivated successfully. Jul 2 08:42:11.311934 systemd[1]: Stopped ignition-fetch.service. Jul 2 08:42:11.312802 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 08:42:11.312838 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 08:42:11.313762 systemd[1]: Stopped target paths.target. Jul 2 08:42:11.314621 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 08:42:11.318522 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 08:42:11.319002 systemd[1]: Stopped target slices.target. Jul 2 08:42:11.319900 systemd[1]: Stopped target sockets.target. Jul 2 08:42:11.320781 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 08:42:11.320815 systemd[1]: Closed iscsid.socket. Jul 2 08:42:11.325000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.325133 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 08:42:11.325174 systemd[1]: Stopped ignition-setup.service. Jul 2 08:42:11.325729 systemd[1]: Stopping iscsiuio.service... Jul 2 08:42:11.327345 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 08:42:11.329838 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 08:42:11.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.329926 systemd[1]: Stopped iscsiuio.service. Jul 2 08:42:11.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.331000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.330774 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 08:42:11.330852 systemd[1]: Finished initrd-cleanup.service. Jul 2 08:42:11.332378 systemd[1]: Stopped target network.target. Jul 2 08:42:11.333220 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 08:42:11.333250 systemd[1]: Closed iscsiuio.socket. Jul 2 08:42:11.334381 systemd[1]: Stopping systemd-networkd.service... Jul 2 08:42:11.335124 systemd[1]: Stopping systemd-resolved.service... Jul 2 08:42:11.336517 systemd-networkd[632]: eth0: DHCPv6 lease lost Jul 2 08:42:11.337620 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 08:42:11.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.337711 systemd[1]: Stopped systemd-networkd.service. Jul 2 08:42:11.341057 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 08:42:11.341172 systemd[1]: Stopped systemd-resolved.service. Jul 2 08:42:11.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.343694 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 08:42:11.343000 audit: BPF prog-id=9 op=UNLOAD Jul 2 08:42:11.344000 audit: BPF prog-id=6 op=UNLOAD Jul 2 08:42:11.343735 systemd[1]: Closed systemd-networkd.socket. Jul 2 08:42:11.345191 systemd[1]: Stopping network-cleanup.service... Jul 2 08:42:11.347077 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 08:42:11.347140 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 08:42:11.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.348252 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 08:42:11.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.348289 systemd[1]: Stopped systemd-sysctl.service. Jul 2 08:42:11.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.349425 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 08:42:11.349476 systemd[1]: Stopped systemd-modules-load.service. Jul 2 08:42:11.350169 systemd[1]: Stopping systemd-udevd.service... Jul 2 08:42:11.356156 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 08:42:11.358841 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 08:42:11.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.358935 systemd[1]: Stopped network-cleanup.service. Jul 2 08:42:11.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.360030 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 08:42:11.360153 systemd[1]: Stopped systemd-udevd.service. Jul 2 08:42:11.361673 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 08:42:11.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.361721 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 08:42:11.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.362206 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 08:42:11.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.362235 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 08:42:11.363136 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 08:42:11.363193 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 08:42:11.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.364277 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 08:42:11.364334 systemd[1]: Stopped dracut-cmdline.service. Jul 2 08:42:11.365501 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 08:42:11.365541 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 08:42:11.367285 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 08:42:11.368352 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 08:42:11.368399 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 08:42:11.374982 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 08:42:11.375092 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 08:42:11.737412 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 08:42:11.737709 systemd[1]: Stopped sysroot-boot.service. Jul 2 08:42:11.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.740307 systemd[1]: Reached target initrd-switch-root.target. Jul 2 08:42:11.742276 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 08:42:11.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:11.742395 systemd[1]: Stopped initrd-setup-root.service. Jul 2 08:42:11.746039 systemd[1]: Starting initrd-switch-root.service... Jul 2 08:42:11.790268 systemd[1]: Switching root. Jul 2 08:42:11.822092 systemd-journald[186]: Journal stopped Jul 2 08:42:16.171227 systemd-journald[186]: Received SIGTERM from PID 1 (systemd). Jul 2 08:42:16.177557 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 08:42:16.177580 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 08:42:16.177596 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 08:42:16.177609 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 08:42:16.177621 kernel: SELinux: policy capability open_perms=1 Jul 2 08:42:16.177634 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 08:42:16.177646 kernel: SELinux: policy capability always_check_network=0 Jul 2 08:42:16.177657 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 08:42:16.177669 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 08:42:16.177685 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 08:42:16.177698 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 08:42:16.177712 systemd[1]: Successfully loaded SELinux policy in 88.661ms. Jul 2 08:42:16.177733 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 23.951ms. Jul 2 08:42:16.177754 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 08:42:16.177767 systemd[1]: Detected virtualization kvm. Jul 2 08:42:16.177789 systemd[1]: Detected architecture x86-64. Jul 2 08:42:16.177802 systemd[1]: Detected first boot. Jul 2 08:42:16.177820 systemd[1]: Hostname set to . Jul 2 08:42:16.177835 systemd[1]: Initializing machine ID from VM UUID. Jul 2 08:42:16.177848 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 08:42:16.177862 systemd[1]: Populated /etc with preset unit settings. Jul 2 08:42:16.177876 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:42:16.177892 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:42:16.177909 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:42:16.177923 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 08:42:16.177936 systemd[1]: Stopped initrd-switch-root.service. Jul 2 08:42:16.177950 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 08:42:16.177963 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 08:42:16.177976 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 08:42:16.177992 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Jul 2 08:42:16.178005 systemd[1]: Created slice system-getty.slice. Jul 2 08:42:16.178018 systemd[1]: Created slice system-modprobe.slice. Jul 2 08:42:16.178031 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 08:42:16.178044 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 08:42:16.178057 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 08:42:16.178069 systemd[1]: Created slice user.slice. Jul 2 08:42:16.178082 systemd[1]: Started systemd-ask-password-console.path. Jul 2 08:42:16.178094 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 08:42:16.178109 systemd[1]: Set up automount boot.automount. Jul 2 08:42:16.178122 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 08:42:16.178136 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 08:42:16.178148 systemd[1]: Stopped target initrd-fs.target. Jul 2 08:42:16.178161 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 08:42:16.178173 systemd[1]: Reached target integritysetup.target. Jul 2 08:42:16.178188 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 08:42:16.178201 systemd[1]: Reached target remote-fs.target. Jul 2 08:42:16.178214 systemd[1]: Reached target slices.target. Jul 2 08:42:16.178227 systemd[1]: Reached target swap.target. Jul 2 08:42:16.178239 systemd[1]: Reached target torcx.target. Jul 2 08:42:16.178252 systemd[1]: Reached target veritysetup.target. Jul 2 08:42:16.178265 systemd[1]: Listening on systemd-coredump.socket. Jul 2 08:42:16.178278 systemd[1]: Listening on systemd-initctl.socket. Jul 2 08:42:16.178290 systemd[1]: Listening on systemd-networkd.socket. Jul 2 08:42:16.178304 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 08:42:16.178319 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 08:42:16.178331 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 08:42:16.178344 systemd[1]: Mounting dev-hugepages.mount... Jul 2 08:42:16.178356 systemd[1]: Mounting dev-mqueue.mount... Jul 2 08:42:16.178369 systemd[1]: Mounting media.mount... Jul 2 08:42:16.178382 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:42:16.178395 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 08:42:16.178408 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 08:42:16.178420 systemd[1]: Mounting tmp.mount... Jul 2 08:42:16.178435 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 08:42:16.178447 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:42:16.178474 systemd[1]: Starting kmod-static-nodes.service... Jul 2 08:42:16.178489 systemd[1]: Starting modprobe@configfs.service... Jul 2 08:42:16.178502 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:42:16.178515 systemd[1]: Starting modprobe@drm.service... Jul 2 08:42:16.178528 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 08:42:16.178541 systemd[1]: Starting modprobe@fuse.service... Jul 2 08:42:16.178553 systemd[1]: Starting modprobe@loop.service... Jul 2 08:42:16.178569 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 08:42:16.178582 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 08:42:16.178595 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 08:42:16.178608 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 08:42:16.178620 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 08:42:16.178633 systemd[1]: Stopped systemd-journald.service. Jul 2 08:42:16.178646 systemd[1]: Starting systemd-journald.service... Jul 2 08:42:16.178660 systemd[1]: Starting systemd-modules-load.service... Jul 2 08:42:16.178672 systemd[1]: Starting systemd-network-generator.service... Jul 2 08:42:16.178687 systemd[1]: Starting systemd-remount-fs.service... Jul 2 08:42:16.178700 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 08:42:16.178713 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 08:42:16.178727 systemd[1]: Stopped verity-setup.service. Jul 2 08:42:16.178739 kernel: kauditd_printk_skb: 79 callbacks suppressed Jul 2 08:42:16.178752 kernel: audit: type=1131 audit(1719909736.110:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.178765 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:42:16.178778 systemd[1]: Mounted dev-hugepages.mount. Jul 2 08:42:16.178791 systemd[1]: Mounted dev-mqueue.mount. Jul 2 08:42:16.178805 systemd[1]: Mounted media.mount. Jul 2 08:42:16.178818 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 08:42:16.178831 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 08:42:16.178844 systemd[1]: Mounted tmp.mount. Jul 2 08:42:16.178857 systemd[1]: Finished kmod-static-nodes.service. Jul 2 08:42:16.178870 kernel: audit: type=1130 audit(1719909736.139:120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.178883 kernel: loop: module loaded Jul 2 08:42:16.178895 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 08:42:16.178908 systemd[1]: Finished modprobe@configfs.service. Jul 2 08:42:16.178923 kernel: audit: type=1130 audit(1719909736.147:121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.178936 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:42:16.178949 kernel: audit: type=1131 audit(1719909736.151:122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.178962 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:42:16.178977 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 08:42:16.178991 kernel: audit: type=1130 audit(1719909736.158:123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.179003 kernel: fuse: init (API version 7.34) Jul 2 08:42:16.179029 systemd[1]: Finished modprobe@drm.service. Jul 2 08:42:16.179043 kernel: audit: type=1131 audit(1719909736.158:124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.179054 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 08:42:16.179065 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 08:42:16.179077 kernel: audit: type=1305 audit(1719909736.169:125): op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 08:42:16.179093 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 08:42:16.179106 kernel: audit: type=1300 audit(1719909736.169:125): arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffdef1fe5b0 a2=4000 a3=7ffdef1fe64c items=0 ppid=1 pid=916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:16.179122 systemd-journald[916]: Journal started Jul 2 08:42:16.179171 systemd-journald[916]: Runtime Journal (/run/log/journal/0dbe5e3d2115483c91280fdd09cf58eb) is 4.9M, max 39.5M, 34.5M free. Jul 2 08:42:12.128000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 08:42:12.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 08:42:12.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 08:42:12.261000 audit: BPF prog-id=10 op=LOAD Jul 2 08:42:12.261000 audit: BPF prog-id=10 op=UNLOAD Jul 2 08:42:12.261000 audit: BPF prog-id=11 op=LOAD Jul 2 08:42:12.261000 audit: BPF prog-id=11 op=UNLOAD Jul 2 08:42:12.423000 audit[850]: AVC avc: denied { associate } for pid=850 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 08:42:12.423000 audit[850]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178d2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=833 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:12.423000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 08:42:12.425000 audit[850]: AVC avc: denied { associate } for pid=850 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 08:42:12.425000 audit[850]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179a9 a2=1ed a3=0 items=2 ppid=833 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:12.425000 audit: CWD cwd="/" Jul 2 08:42:12.425000 audit: PATH item=0 name=(null) inode=2 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:12.425000 audit: PATH item=1 name=(null) inode=3 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:12.425000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 08:42:15.914000 audit: BPF prog-id=12 op=LOAD Jul 2 08:42:15.914000 audit: BPF prog-id=3 op=UNLOAD Jul 2 08:42:15.914000 audit: BPF prog-id=13 op=LOAD Jul 2 08:42:15.914000 audit: BPF prog-id=14 op=LOAD Jul 2 08:42:15.914000 audit: BPF prog-id=4 op=UNLOAD Jul 2 08:42:15.914000 audit: BPF prog-id=5 op=UNLOAD Jul 2 08:42:15.915000 audit: BPF prog-id=15 op=LOAD Jul 2 08:42:15.915000 audit: BPF prog-id=12 op=UNLOAD Jul 2 08:42:15.915000 audit: BPF prog-id=16 op=LOAD Jul 2 08:42:15.915000 audit: BPF prog-id=17 op=LOAD Jul 2 08:42:15.915000 audit: BPF prog-id=13 op=UNLOAD Jul 2 08:42:15.915000 audit: BPF prog-id=14 op=UNLOAD Jul 2 08:42:15.916000 audit: BPF prog-id=18 op=LOAD Jul 2 08:42:15.916000 audit: BPF prog-id=15 op=UNLOAD Jul 2 08:42:15.916000 audit: BPF prog-id=19 op=LOAD Jul 2 08:42:15.916000 audit: BPF prog-id=20 op=LOAD Jul 2 08:42:15.916000 audit: BPF prog-id=16 op=UNLOAD Jul 2 08:42:15.916000 audit: BPF prog-id=17 op=UNLOAD Jul 2 08:42:15.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:15.923000 audit: BPF prog-id=18 op=UNLOAD Jul 2 08:42:15.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:15.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.084000 audit: BPF prog-id=21 op=LOAD Jul 2 08:42:16.086000 audit: BPF prog-id=22 op=LOAD Jul 2 08:42:16.086000 audit: BPF prog-id=23 op=LOAD Jul 2 08:42:16.086000 audit: BPF prog-id=19 op=UNLOAD Jul 2 08:42:16.086000 audit: BPF prog-id=20 op=UNLOAD Jul 2 08:42:16.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.169000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 08:42:16.169000 audit[916]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffdef1fe5b0 a2=4000 a3=7ffdef1fe64c items=0 ppid=1 pid=916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:12.419816 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:42:15.912572 systemd[1]: Queued start job for default target multi-user.target. Jul 2 08:42:12.420651 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 08:42:15.912586 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 2 08:42:12.420675 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 08:42:15.917394 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 08:42:12.420726 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 08:42:12.420738 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 08:42:12.420771 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 08:42:12.420786 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 08:42:12.421011 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 08:42:12.421051 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 08:42:12.421066 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 08:42:12.423216 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 08:42:12.423256 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 08:42:12.423278 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 08:42:12.423296 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 08:42:12.423316 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 08:42:12.423333 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:12Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 08:42:15.406591 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:15Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:42:16.188518 systemd[1]: Finished modprobe@loop.service. Jul 2 08:42:16.188550 systemd[1]: Started systemd-journald.service. Jul 2 08:42:16.188568 kernel: audit: type=1327 audit(1719909736.169:125): proctitle="/usr/lib/systemd/systemd-journald" Jul 2 08:42:16.169000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 08:42:15.407715 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:15Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:42:16.186111 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 08:42:15.408044 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:15Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:42:16.186227 systemd[1]: Finished modprobe@fuse.service. Jul 2 08:42:15.408540 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:15Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 08:42:15.408706 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:15Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 08:42:15.408867 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-07-02T08:42:15Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 08:42:16.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.194100 kernel: audit: type=1130 audit(1719909736.169:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.193331 systemd[1]: Finished systemd-modules-load.service. Jul 2 08:42:16.194420 systemd[1]: Finished systemd-network-generator.service. Jul 2 08:42:16.195415 systemd[1]: Finished systemd-remount-fs.service. Jul 2 08:42:16.200710 systemd[1]: Reached target network-pre.target. Jul 2 08:42:16.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.202369 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 08:42:16.204001 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 08:42:16.207541 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 08:42:16.209763 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 08:42:16.211280 systemd[1]: Starting systemd-journal-flush.service... Jul 2 08:42:16.211880 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 08:42:16.213126 systemd[1]: Starting systemd-random-seed.service... Jul 2 08:42:16.213693 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 08:42:16.215059 systemd[1]: Starting systemd-sysctl.service... Jul 2 08:42:16.217405 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 08:42:16.217957 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 08:42:16.232155 systemd-journald[916]: Time spent on flushing to /var/log/journal/0dbe5e3d2115483c91280fdd09cf58eb is 27.093ms for 1108 entries. Jul 2 08:42:16.232155 systemd-journald[916]: System Journal (/var/log/journal/0dbe5e3d2115483c91280fdd09cf58eb) is 8.0M, max 584.8M, 576.8M free. Jul 2 08:42:16.281253 systemd-journald[916]: Received client request to flush runtime journal. Jul 2 08:42:16.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.245376 systemd[1]: Finished systemd-random-seed.service. Jul 2 08:42:16.281639 udevadm[956]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 2 08:42:16.246020 systemd[1]: Reached target first-boot-complete.target. Jul 2 08:42:16.248032 systemd[1]: Finished systemd-sysctl.service. Jul 2 08:42:16.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.263667 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 08:42:16.265519 systemd[1]: Starting systemd-udev-settle.service... Jul 2 08:42:16.282276 systemd[1]: Finished systemd-journal-flush.service. Jul 2 08:42:16.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.284162 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 08:42:16.285862 systemd[1]: Starting systemd-sysusers.service... Jul 2 08:42:16.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.323672 systemd[1]: Finished systemd-sysusers.service. Jul 2 08:42:16.891650 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 08:42:16.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:16.894000 audit: BPF prog-id=24 op=LOAD Jul 2 08:42:16.894000 audit: BPF prog-id=25 op=LOAD Jul 2 08:42:16.894000 audit: BPF prog-id=7 op=UNLOAD Jul 2 08:42:16.895000 audit: BPF prog-id=8 op=UNLOAD Jul 2 08:42:16.897113 systemd[1]: Starting systemd-udevd.service... Jul 2 08:42:16.941788 systemd-udevd[961]: Using default interface naming scheme 'v252'. Jul 2 08:42:16.997594 systemd[1]: Started systemd-udevd.service. Jul 2 08:42:16.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:17.001000 audit: BPF prog-id=26 op=LOAD Jul 2 08:42:17.008282 systemd[1]: Starting systemd-networkd.service... Jul 2 08:42:17.029000 audit: BPF prog-id=27 op=LOAD Jul 2 08:42:17.030000 audit: BPF prog-id=28 op=LOAD Jul 2 08:42:17.030000 audit: BPF prog-id=29 op=LOAD Jul 2 08:42:17.033303 systemd[1]: Starting systemd-userdbd.service... Jul 2 08:42:17.084913 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 08:42:17.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:17.096801 systemd[1]: Started systemd-userdbd.service. Jul 2 08:42:17.162185 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 08:42:17.167510 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 2 08:42:17.175766 kernel: ACPI: button: Power Button [PWRF] Jul 2 08:42:17.188711 systemd-networkd[969]: lo: Link UP Jul 2 08:42:17.188719 systemd-networkd[969]: lo: Gained carrier Jul 2 08:42:17.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:17.189976 systemd-networkd[969]: Enumeration completed Jul 2 08:42:17.190061 systemd[1]: Started systemd-networkd.service. Jul 2 08:42:17.191249 systemd-networkd[969]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 08:42:17.193828 systemd-networkd[969]: eth0: Link UP Jul 2 08:42:17.193841 systemd-networkd[969]: eth0: Gained carrier Jul 2 08:42:17.189000 audit[973]: AVC avc: denied { confidentiality } for pid=973 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 08:42:17.204587 systemd-networkd[969]: eth0: DHCPv4 address 172.24.4.178/24, gateway 172.24.4.1 acquired from 172.24.4.1 Jul 2 08:42:17.189000 audit[973]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=557031e1d500 a1=3207c a2=7f852082fbc5 a3=5 items=108 ppid=961 pid=973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:17.189000 audit: CWD cwd="/" Jul 2 08:42:17.189000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=1 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=2 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=3 name=(null) inode=14453 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=4 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=5 name=(null) inode=14454 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=6 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=7 name=(null) inode=14455 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=8 name=(null) inode=14455 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=9 name=(null) inode=14456 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=10 name=(null) inode=14455 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=11 name=(null) inode=14457 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=12 name=(null) inode=14455 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=13 name=(null) inode=14458 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=14 name=(null) inode=14455 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=15 name=(null) inode=14459 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=16 name=(null) inode=14455 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=17 name=(null) inode=14460 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=18 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=19 name=(null) inode=14461 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=20 name=(null) inode=14461 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=21 name=(null) inode=14462 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=22 name=(null) inode=14461 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=23 name=(null) inode=14463 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=24 name=(null) inode=14461 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=25 name=(null) inode=14464 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=26 name=(null) inode=14461 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=27 name=(null) inode=14465 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=28 name=(null) inode=14461 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=29 name=(null) inode=14466 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=30 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=31 name=(null) inode=14467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=32 name=(null) inode=14467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=33 name=(null) inode=14468 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=34 name=(null) inode=14467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=35 name=(null) inode=14469 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=36 name=(null) inode=14467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=37 name=(null) inode=14470 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=38 name=(null) inode=14467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=39 name=(null) inode=14471 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=40 name=(null) inode=14467 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=41 name=(null) inode=14472 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=42 name=(null) inode=14452 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=43 name=(null) inode=14473 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=44 name=(null) inode=14473 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=45 name=(null) inode=14474 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=46 name=(null) inode=14473 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=47 name=(null) inode=14475 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=48 name=(null) inode=14473 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=49 name=(null) inode=14476 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=50 name=(null) inode=14473 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=51 name=(null) inode=14477 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=52 name=(null) inode=14473 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=53 name=(null) inode=14478 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=55 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=56 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=57 name=(null) inode=14480 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=58 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=59 name=(null) inode=14481 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=60 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=61 name=(null) inode=14482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=62 name=(null) inode=14482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=63 name=(null) inode=14483 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=64 name=(null) inode=14482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=65 name=(null) inode=14484 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=66 name=(null) inode=14482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=67 name=(null) inode=14485 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=68 name=(null) inode=14482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=69 name=(null) inode=14486 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=70 name=(null) inode=14482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=71 name=(null) inode=14487 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=72 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=73 name=(null) inode=14488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=74 name=(null) inode=14488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=75 name=(null) inode=14489 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=76 name=(null) inode=14488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=77 name=(null) inode=14490 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=78 name=(null) inode=14488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=79 name=(null) inode=14491 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=80 name=(null) inode=14488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=81 name=(null) inode=14492 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=82 name=(null) inode=14488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=83 name=(null) inode=14493 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=84 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=85 name=(null) inode=14494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=86 name=(null) inode=14494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=87 name=(null) inode=14495 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=88 name=(null) inode=14494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=89 name=(null) inode=14496 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=90 name=(null) inode=14494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=91 name=(null) inode=14497 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=92 name=(null) inode=14494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=93 name=(null) inode=14498 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=94 name=(null) inode=14494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=95 name=(null) inode=14499 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=96 name=(null) inode=14479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=97 name=(null) inode=14500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=98 name=(null) inode=14500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=99 name=(null) inode=14501 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=100 name=(null) inode=14500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=101 name=(null) inode=14502 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=102 name=(null) inode=14500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=103 name=(null) inode=14503 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=104 name=(null) inode=14500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=105 name=(null) inode=14504 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=106 name=(null) inode=14500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PATH item=107 name=(null) inode=14505 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:42:17.189000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 08:42:17.262553 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Jul 2 08:42:17.267496 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 2 08:42:17.302521 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 08:42:17.318962 systemd[1]: Finished systemd-udev-settle.service. Jul 2 08:42:17.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:17.320922 systemd[1]: Starting lvm2-activation-early.service... Jul 2 08:42:17.482820 lvm[990]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 08:42:17.524591 systemd[1]: Finished lvm2-activation-early.service. Jul 2 08:42:17.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:17.525984 systemd[1]: Reached target cryptsetup.target. Jul 2 08:42:17.529767 systemd[1]: Starting lvm2-activation.service... Jul 2 08:42:17.540059 lvm[991]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 08:42:17.578586 systemd[1]: Finished lvm2-activation.service. Jul 2 08:42:17.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:17.580016 systemd[1]: Reached target local-fs-pre.target. Jul 2 08:42:17.581167 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 08:42:17.581233 systemd[1]: Reached target local-fs.target. Jul 2 08:42:17.582341 systemd[1]: Reached target machines.target. Jul 2 08:42:17.586114 systemd[1]: Starting ldconfig.service... Jul 2 08:42:17.588400 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:42:17.588565 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:17.592016 systemd[1]: Starting systemd-boot-update.service... Jul 2 08:42:17.598159 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 08:42:17.607045 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 08:42:17.617675 systemd[1]: Starting systemd-sysext.service... Jul 2 08:42:17.619641 systemd[1]: boot.automount: Got automount request for /boot, triggered by 993 (bootctl) Jul 2 08:42:17.622522 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 08:42:17.650028 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 08:42:17.718783 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 08:42:17.719289 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 08:42:17.777609 kernel: loop0: detected capacity change from 0 to 210664 Jul 2 08:42:17.779536 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 08:42:17.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.039252 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 08:42:18.040725 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 08:42:18.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.096625 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 08:42:18.133085 kernel: loop1: detected capacity change from 0 to 210664 Jul 2 08:42:18.183376 (sd-sysext)[1008]: Using extensions 'kubernetes'. Jul 2 08:42:18.185569 (sd-sysext)[1008]: Merged extensions into '/usr'. Jul 2 08:42:18.218557 systemd-fsck[1005]: fsck.fat 4.2 (2021-01-31) Jul 2 08:42:18.218557 systemd-fsck[1005]: /dev/vda1: 789 files, 119238/258078 clusters Jul 2 08:42:18.248506 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 08:42:18.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.255516 systemd[1]: Mounting boot.mount... Jul 2 08:42:18.256196 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:42:18.258130 systemd[1]: Mounting usr-share-oem.mount... Jul 2 08:42:18.260028 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.263120 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:42:18.265360 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 08:42:18.269080 systemd[1]: Starting modprobe@loop.service... Jul 2 08:42:18.270742 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.270877 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:18.271030 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:42:18.274234 systemd[1]: Mounted usr-share-oem.mount. Jul 2 08:42:18.275104 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:42:18.275240 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:42:18.275000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.275000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.276407 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 08:42:18.276563 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 08:42:18.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.277350 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 08:42:18.277487 systemd[1]: Finished modprobe@loop.service. Jul 2 08:42:18.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.278718 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 08:42:18.278833 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.281887 systemd[1]: Finished systemd-sysext.service. Jul 2 08:42:18.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.282501 systemd[1]: Mounted boot.mount. Jul 2 08:42:18.287959 systemd[1]: Starting ensure-sysext.service... Jul 2 08:42:18.289704 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 08:42:18.302624 systemd[1]: Reloading. Jul 2 08:42:18.338842 systemd-tmpfiles[1016]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 08:42:18.341717 systemd-networkd[969]: eth0: Gained IPv6LL Jul 2 08:42:18.352039 systemd-tmpfiles[1016]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 08:42:18.369605 systemd-tmpfiles[1016]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 08:42:18.406820 /usr/lib/systemd/system-generators/torcx-generator[1038]: time="2024-07-02T08:42:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:42:18.407199 /usr/lib/systemd/system-generators/torcx-generator[1038]: time="2024-07-02T08:42:18Z" level=info msg="torcx already run" Jul 2 08:42:18.525130 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:42:18.525420 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:42:18.558022 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:42:18.628043 ldconfig[992]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 08:42:18.636000 audit: BPF prog-id=30 op=LOAD Jul 2 08:42:18.637000 audit: BPF prog-id=31 op=LOAD Jul 2 08:42:18.637000 audit: BPF prog-id=24 op=UNLOAD Jul 2 08:42:18.637000 audit: BPF prog-id=25 op=UNLOAD Jul 2 08:42:18.638000 audit: BPF prog-id=32 op=LOAD Jul 2 08:42:18.639000 audit: BPF prog-id=26 op=UNLOAD Jul 2 08:42:18.641000 audit: BPF prog-id=33 op=LOAD Jul 2 08:42:18.641000 audit: BPF prog-id=21 op=UNLOAD Jul 2 08:42:18.642000 audit: BPF prog-id=34 op=LOAD Jul 2 08:42:18.642000 audit: BPF prog-id=35 op=LOAD Jul 2 08:42:18.642000 audit: BPF prog-id=22 op=UNLOAD Jul 2 08:42:18.642000 audit: BPF prog-id=23 op=UNLOAD Jul 2 08:42:18.644000 audit: BPF prog-id=36 op=LOAD Jul 2 08:42:18.644000 audit: BPF prog-id=27 op=UNLOAD Jul 2 08:42:18.644000 audit: BPF prog-id=37 op=LOAD Jul 2 08:42:18.644000 audit: BPF prog-id=38 op=LOAD Jul 2 08:42:18.644000 audit: BPF prog-id=28 op=UNLOAD Jul 2 08:42:18.644000 audit: BPF prog-id=29 op=UNLOAD Jul 2 08:42:18.648284 systemd[1]: Finished ldconfig.service. Jul 2 08:42:18.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.649319 systemd[1]: Finished systemd-boot-update.service. Jul 2 08:42:18.649000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.652216 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 08:42:18.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.656452 systemd[1]: Starting audit-rules.service... Jul 2 08:42:18.659099 systemd[1]: Starting clean-ca-certificates.service... Jul 2 08:42:18.665000 audit: BPF prog-id=39 op=LOAD Jul 2 08:42:18.660993 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 08:42:18.666974 systemd[1]: Starting systemd-resolved.service... Jul 2 08:42:18.669000 audit: BPF prog-id=40 op=LOAD Jul 2 08:42:18.670986 systemd[1]: Starting systemd-timesyncd.service... Jul 2 08:42:18.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.674519 systemd[1]: Starting systemd-update-utmp.service... Jul 2 08:42:18.675589 systemd[1]: Finished clean-ca-certificates.service. Jul 2 08:42:18.679800 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 08:42:18.682945 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.685566 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:42:18.688115 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 08:42:18.690723 systemd[1]: Starting modprobe@loop.service... Jul 2 08:42:18.691292 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.691427 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:18.691914 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 08:42:18.693348 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:42:18.695287 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:42:18.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.698107 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.699565 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:42:18.700072 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.700182 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:18.700290 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 08:42:18.702048 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:42:18.702177 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:42:18.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.706135 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.708404 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 08:42:18.710439 systemd[1]: Starting modprobe@drm.service... Jul 2 08:42:18.711645 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.711796 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:18.713048 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 08:42:18.714064 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 08:42:18.719950 systemd[1]: Finished ensure-sysext.service. Jul 2 08:42:18.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.720685 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 08:42:18.720817 systemd[1]: Finished modprobe@loop.service. Jul 2 08:42:18.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.721334 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:42:18.721352 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 08:42:18.726000 audit[1091]: SYSTEM_BOOT pid=1091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.727997 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 08:42:18.728142 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 08:42:18.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.728903 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 08:42:18.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.729627 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 08:42:18.729748 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 08:42:18.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.730295 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 08:42:18.730338 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.732450 systemd[1]: Finished systemd-update-utmp.service. Jul 2 08:42:18.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.734660 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 08:42:18.734780 systemd[1]: Finished modprobe@drm.service. Jul 2 08:42:18.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.739256 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 08:42:18.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.741983 systemd[1]: Starting systemd-update-done.service... Jul 2 08:42:18.754840 systemd[1]: Finished systemd-update-done.service. Jul 2 08:42:18.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:18.781000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 08:42:18.781000 audit[1111]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffce73dca10 a2=420 a3=0 items=0 ppid=1083 pid=1111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:18.781000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 08:42:18.782177 augenrules[1111]: No rules Jul 2 08:42:18.783396 systemd[1]: Finished audit-rules.service. Jul 2 08:42:18.791291 systemd[1]: Started systemd-timesyncd.service. Jul 2 08:42:18.791909 systemd[1]: Reached target time-set.target. Jul 2 08:42:18.804600 systemd-resolved[1087]: Positive Trust Anchors: Jul 2 08:42:18.804617 systemd-resolved[1087]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 08:42:18.804653 systemd-resolved[1087]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 08:42:18.811922 systemd-resolved[1087]: Using system hostname 'ci-3510-3-5-1-a8b80a6678.novalocal'. Jul 2 08:42:18.813500 systemd[1]: Started systemd-resolved.service. Jul 2 08:42:18.814063 systemd[1]: Reached target network.target. Jul 2 08:42:18.814482 systemd[1]: Reached target network-online.target. Jul 2 08:42:18.814899 systemd[1]: Reached target nss-lookup.target. Jul 2 08:42:18.815330 systemd[1]: Reached target sysinit.target. Jul 2 08:42:18.815840 systemd[1]: Started motdgen.path. Jul 2 08:42:18.816257 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 08:42:18.816934 systemd[1]: Started logrotate.timer. Jul 2 08:42:18.817409 systemd[1]: Started mdadm.timer. Jul 2 08:42:18.817827 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 08:42:18.818279 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 08:42:18.818321 systemd[1]: Reached target paths.target. Jul 2 08:42:18.818755 systemd[1]: Reached target timers.target. Jul 2 08:42:18.819521 systemd[1]: Listening on dbus.socket. Jul 2 08:42:18.821144 systemd[1]: Starting docker.socket... Jul 2 08:42:18.824284 systemd-timesyncd[1090]: Contacted time server 129.250.35.250:123 (0.flatcar.pool.ntp.org). Jul 2 08:42:18.824602 systemd-timesyncd[1090]: Initial clock synchronization to Tue 2024-07-02 08:42:18.617041 UTC. Jul 2 08:42:18.824884 systemd[1]: Listening on sshd.socket. Jul 2 08:42:18.825509 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:18.825941 systemd[1]: Listening on docker.socket. Jul 2 08:42:18.826551 systemd[1]: Reached target sockets.target. Jul 2 08:42:18.827047 systemd[1]: Reached target basic.target. Jul 2 08:42:18.827602 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.827700 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 08:42:18.828860 systemd[1]: Starting containerd.service... Jul 2 08:42:18.830646 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Jul 2 08:42:18.832377 systemd[1]: Starting dbus.service... Jul 2 08:42:18.836403 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 08:42:18.838160 systemd[1]: Starting extend-filesystems.service... Jul 2 08:42:18.839434 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 08:42:18.842340 systemd[1]: Starting kubelet.service... Jul 2 08:42:18.844945 systemd[1]: Starting motdgen.service... Jul 2 08:42:18.852216 systemd[1]: Starting prepare-helm.service... Jul 2 08:42:18.866275 jq[1124]: false Jul 2 08:42:18.853879 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 08:42:18.855375 systemd[1]: Starting sshd-keygen.service... Jul 2 08:42:18.861773 systemd[1]: Starting systemd-logind.service... Jul 2 08:42:18.862542 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 08:42:18.862615 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 08:42:18.883153 jq[1135]: true Jul 2 08:42:18.863131 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 08:42:18.864612 systemd[1]: Starting update-engine.service... Jul 2 08:42:18.866556 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 08:42:18.870729 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 08:42:18.870935 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 08:42:18.889131 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 08:42:18.889295 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 08:42:18.906493 tar[1138]: linux-amd64/helm Jul 2 08:42:18.912081 jq[1139]: true Jul 2 08:42:18.953808 extend-filesystems[1125]: Found loop1 Jul 2 08:42:18.954719 extend-filesystems[1125]: Found vda Jul 2 08:42:18.954719 extend-filesystems[1125]: Found vda1 Jul 2 08:42:18.954719 extend-filesystems[1125]: Found vda2 Jul 2 08:42:18.954719 extend-filesystems[1125]: Found vda3 Jul 2 08:42:18.957069 extend-filesystems[1125]: Found usr Jul 2 08:42:18.957069 extend-filesystems[1125]: Found vda4 Jul 2 08:42:18.957069 extend-filesystems[1125]: Found vda6 Jul 2 08:42:18.957069 extend-filesystems[1125]: Found vda7 Jul 2 08:42:18.957069 extend-filesystems[1125]: Found vda9 Jul 2 08:42:18.957069 extend-filesystems[1125]: Checking size of /dev/vda9 Jul 2 08:42:18.957270 dbus-daemon[1121]: [system] SELinux support is enabled Jul 2 08:42:18.957600 systemd[1]: Started dbus.service. Jul 2 08:42:18.961209 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 08:42:18.961237 systemd[1]: Reached target system-config.target. Jul 2 08:42:18.961716 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 08:42:18.961731 systemd[1]: Reached target user-config.target. Jul 2 08:42:18.968537 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 08:42:18.968690 systemd[1]: Finished motdgen.service. Jul 2 08:42:18.995448 extend-filesystems[1125]: Resized partition /dev/vda9 Jul 2 08:42:19.014132 bash[1171]: Updated "/home/core/.ssh/authorized_keys" Jul 2 08:42:19.013515 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 08:42:19.014538 extend-filesystems[1177]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 08:42:19.025377 env[1144]: time="2024-07-02T08:42:19.025325676Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 08:42:19.034594 update_engine[1134]: I0702 08:42:19.033390 1134 main.cc:92] Flatcar Update Engine starting Jul 2 08:42:19.044317 systemd[1]: Started update-engine.service. Jul 2 08:42:19.047576 systemd[1]: Started locksmithd.service. Jul 2 08:42:19.048943 update_engine[1134]: I0702 08:42:19.048810 1134 update_check_scheduler.cc:74] Next update check in 7m55s Jul 2 08:42:19.050492 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Jul 2 08:42:19.060580 systemd-logind[1133]: Watching system buttons on /dev/input/event1 (Power Button) Jul 2 08:42:19.060608 systemd-logind[1133]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 2 08:42:19.064533 systemd-logind[1133]: New seat seat0. Jul 2 08:42:19.067371 systemd[1]: Started systemd-logind.service. Jul 2 08:42:19.125406 env[1144]: time="2024-07-02T08:42:19.125334608Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 08:42:19.126803 env[1144]: time="2024-07-02T08:42:19.126774055Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.129897908Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.129946705Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130198672Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130219216Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130234615Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130246883Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130329154Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130589984Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130706773Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 08:42:19.130803 env[1144]: time="2024-07-02T08:42:19.130725131Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 08:42:19.132287 env[1144]: time="2024-07-02T08:42:19.130780115Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 08:42:19.132365 env[1144]: time="2024-07-02T08:42:19.132349956Z" level=info msg="metadata content store policy set" policy=shared Jul 2 08:42:19.174506 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Jul 2 08:42:19.244029 extend-filesystems[1177]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 2 08:42:19.244029 extend-filesystems[1177]: old_desc_blocks = 1, new_desc_blocks = 3 Jul 2 08:42:19.244029 extend-filesystems[1177]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Jul 2 08:42:19.268779 extend-filesystems[1125]: Resized filesystem in /dev/vda9 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246010277Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246112857Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246151778Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246275693Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246331272Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246368768Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246409240Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246518164Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246558704Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246702099Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246724887Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246741009Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246886014Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 08:42:19.276110 env[1144]: time="2024-07-02T08:42:19.246976082Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 08:42:19.245509 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247263574Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247293798Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247310574Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247366173Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247388415Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247409583Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247430439Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247477519Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247494470Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247508563Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247524353Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247542310Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247691804Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247709645Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.279374 env[1144]: time="2024-07-02T08:42:19.247724410Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.245705 systemd[1]: Finished extend-filesystems.service. Jul 2 08:42:19.280365 env[1144]: time="2024-07-02T08:42:19.247738522Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 08:42:19.280365 env[1144]: time="2024-07-02T08:42:19.247764892Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 08:42:19.280365 env[1144]: time="2024-07-02T08:42:19.247779092Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 08:42:19.280365 env[1144]: time="2024-07-02T08:42:19.247800894Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 08:42:19.280365 env[1144]: time="2024-07-02T08:42:19.247843455Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 08:42:19.249976 systemd[1]: Started containerd.service. Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.248058717Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.248125520Z" level=info msg="Connect containerd service" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.248163640Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.248888936Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.249807653Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.249872933Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.250019275Z" level=info msg="containerd successfully booted in 0.227641s" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.257720636Z" level=info msg="Start subscribing containerd event" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.273788003Z" level=info msg="Start recovering state" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.273884465Z" level=info msg="Start event monitor" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.273900362Z" level=info msg="Start snapshots syncer" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.273911791Z" level=info msg="Start cni network conf syncer for default" Jul 2 08:42:19.280807 env[1144]: time="2024-07-02T08:42:19.273920916Z" level=info msg="Start streaming server" Jul 2 08:42:19.682117 tar[1138]: linux-amd64/LICENSE Jul 2 08:42:19.682428 tar[1138]: linux-amd64/README.md Jul 2 08:42:19.687994 systemd[1]: Finished prepare-helm.service. Jul 2 08:42:19.787662 locksmithd[1180]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 08:42:20.635680 systemd[1]: Started kubelet.service. Jul 2 08:42:21.633573 kubelet[1193]: E0702 08:42:21.633523 1193 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:42:21.635411 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:42:21.635565 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:42:21.635815 systemd[1]: kubelet.service: Consumed 1.390s CPU time. Jul 2 08:42:21.730920 sshd_keygen[1153]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 08:42:21.767906 systemd[1]: Finished sshd-keygen.service. Jul 2 08:42:21.772286 systemd[1]: Starting issuegen.service... Jul 2 08:42:21.783734 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 08:42:21.784067 systemd[1]: Finished issuegen.service. Jul 2 08:42:21.788352 systemd[1]: Starting systemd-user-sessions.service... Jul 2 08:42:21.800127 systemd[1]: Finished systemd-user-sessions.service. Jul 2 08:42:21.805065 systemd[1]: Started getty@tty1.service. Jul 2 08:42:21.809235 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 08:42:21.810892 systemd[1]: Reached target getty.target. Jul 2 08:42:25.957750 coreos-metadata[1120]: Jul 02 08:42:25.956 WARN failed to locate config-drive, using the metadata service API instead Jul 2 08:42:26.064869 coreos-metadata[1120]: Jul 02 08:42:26.064 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Jul 2 08:42:26.399693 coreos-metadata[1120]: Jul 02 08:42:26.399 INFO Fetch successful Jul 2 08:42:26.400034 coreos-metadata[1120]: Jul 02 08:42:26.399 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Jul 2 08:42:26.416107 coreos-metadata[1120]: Jul 02 08:42:26.415 INFO Fetch successful Jul 2 08:42:26.421561 unknown[1120]: wrote ssh authorized keys file for user: core Jul 2 08:42:26.453565 update-ssh-keys[1215]: Updated "/home/core/.ssh/authorized_keys" Jul 2 08:42:26.454581 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Jul 2 08:42:26.465125 systemd[1]: Reached target multi-user.target. Jul 2 08:42:26.469506 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 08:42:26.481041 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 08:42:26.481674 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 08:42:26.483886 systemd[1]: Startup finished in 946ms (kernel) + 7.260s (initrd) + 14.469s (userspace) = 22.676s. Jul 2 08:42:28.743062 systemd[1]: Created slice system-sshd.slice. Jul 2 08:42:28.745942 systemd[1]: Started sshd@0-172.24.4.178:22-172.24.4.1:41130.service. Jul 2 08:42:30.229630 sshd[1218]: Accepted publickey for core from 172.24.4.1 port 41130 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:30.234361 sshd[1218]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:30.261749 systemd[1]: Created slice user-500.slice. Jul 2 08:42:30.264791 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 08:42:30.274696 systemd-logind[1133]: New session 1 of user core. Jul 2 08:42:30.290066 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 08:42:30.293617 systemd[1]: Starting user@500.service... Jul 2 08:42:30.303036 (systemd)[1221]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:30.428435 systemd[1221]: Queued start job for default target default.target. Jul 2 08:42:30.429060 systemd[1221]: Reached target paths.target. Jul 2 08:42:30.429079 systemd[1221]: Reached target sockets.target. Jul 2 08:42:30.429094 systemd[1221]: Reached target timers.target. Jul 2 08:42:30.429107 systemd[1221]: Reached target basic.target. Jul 2 08:42:30.429148 systemd[1221]: Reached target default.target. Jul 2 08:42:30.429174 systemd[1221]: Startup finished in 112ms. Jul 2 08:42:30.430192 systemd[1]: Started user@500.service. Jul 2 08:42:30.433646 systemd[1]: Started session-1.scope. Jul 2 08:42:31.007950 systemd[1]: Started sshd@1-172.24.4.178:22-172.24.4.1:41134.service. Jul 2 08:42:31.887138 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 08:42:31.887651 systemd[1]: Stopped kubelet.service. Jul 2 08:42:31.887737 systemd[1]: kubelet.service: Consumed 1.390s CPU time. Jul 2 08:42:31.891077 systemd[1]: Starting kubelet.service... Jul 2 08:42:32.073438 systemd[1]: Started kubelet.service. Jul 2 08:42:32.127644 sshd[1230]: Accepted publickey for core from 172.24.4.1 port 41134 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:32.130383 sshd[1230]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:32.141594 systemd-logind[1133]: New session 2 of user core. Jul 2 08:42:32.142978 systemd[1]: Started session-2.scope. Jul 2 08:42:32.502758 kubelet[1236]: E0702 08:42:32.502082 1236 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:42:32.510305 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:42:32.510809 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:42:32.696689 sshd[1230]: pam_unix(sshd:session): session closed for user core Jul 2 08:42:32.704319 systemd[1]: sshd@1-172.24.4.178:22-172.24.4.1:41134.service: Deactivated successfully. Jul 2 08:42:32.705748 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 08:42:32.707227 systemd-logind[1133]: Session 2 logged out. Waiting for processes to exit. Jul 2 08:42:32.709425 systemd[1]: Started sshd@2-172.24.4.178:22-172.24.4.1:41150.service. Jul 2 08:42:32.713455 systemd-logind[1133]: Removed session 2. Jul 2 08:42:33.901385 sshd[1247]: Accepted publickey for core from 172.24.4.1 port 41150 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:33.904821 sshd[1247]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:33.914694 systemd-logind[1133]: New session 3 of user core. Jul 2 08:42:33.915384 systemd[1]: Started session-3.scope. Jul 2 08:42:34.553177 sshd[1247]: pam_unix(sshd:session): session closed for user core Jul 2 08:42:34.558833 systemd[1]: Started sshd@3-172.24.4.178:22-172.24.4.1:39986.service. Jul 2 08:42:34.561989 systemd[1]: sshd@2-172.24.4.178:22-172.24.4.1:41150.service: Deactivated successfully. Jul 2 08:42:34.563659 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 08:42:34.567041 systemd-logind[1133]: Session 3 logged out. Waiting for processes to exit. Jul 2 08:42:34.569886 systemd-logind[1133]: Removed session 3. Jul 2 08:42:35.939828 sshd[1252]: Accepted publickey for core from 172.24.4.1 port 39986 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:35.942737 sshd[1252]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:35.954301 systemd-logind[1133]: New session 4 of user core. Jul 2 08:42:35.955096 systemd[1]: Started session-4.scope. Jul 2 08:42:36.591972 sshd[1252]: pam_unix(sshd:session): session closed for user core Jul 2 08:42:36.598921 systemd[1]: Started sshd@4-172.24.4.178:22-172.24.4.1:40002.service. Jul 2 08:42:36.601745 systemd[1]: sshd@3-172.24.4.178:22-172.24.4.1:39986.service: Deactivated successfully. Jul 2 08:42:36.603319 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 08:42:36.607149 systemd-logind[1133]: Session 4 logged out. Waiting for processes to exit. Jul 2 08:42:36.609916 systemd-logind[1133]: Removed session 4. Jul 2 08:42:38.164874 sshd[1258]: Accepted publickey for core from 172.24.4.1 port 40002 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:38.168985 sshd[1258]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:38.181236 systemd-logind[1133]: New session 5 of user core. Jul 2 08:42:38.181645 systemd[1]: Started session-5.scope. Jul 2 08:42:38.683620 sudo[1262]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 08:42:38.684364 sudo[1262]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:42:38.699025 dbus-daemon[1121]: \xd0}4\xa2:V: received setenforce notice (enforcing=2010646864) Jul 2 08:42:38.703813 sudo[1262]: pam_unix(sudo:session): session closed for user root Jul 2 08:42:38.927251 sshd[1258]: pam_unix(sshd:session): session closed for user core Jul 2 08:42:38.935048 systemd[1]: Started sshd@5-172.24.4.178:22-172.24.4.1:40004.service. Jul 2 08:42:38.938686 systemd[1]: sshd@4-172.24.4.178:22-172.24.4.1:40002.service: Deactivated successfully. Jul 2 08:42:38.940176 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 08:42:38.944241 systemd-logind[1133]: Session 5 logged out. Waiting for processes to exit. Jul 2 08:42:38.946867 systemd-logind[1133]: Removed session 5. Jul 2 08:42:40.424447 sshd[1265]: Accepted publickey for core from 172.24.4.1 port 40004 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:40.428013 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:40.438646 systemd-logind[1133]: New session 6 of user core. Jul 2 08:42:40.439447 systemd[1]: Started session-6.scope. Jul 2 08:42:40.929437 sudo[1270]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 08:42:40.930009 sudo[1270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:42:40.936306 sudo[1270]: pam_unix(sudo:session): session closed for user root Jul 2 08:42:40.947129 sudo[1269]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 08:42:40.948288 sudo[1269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:42:40.970545 systemd[1]: Stopping audit-rules.service... Jul 2 08:42:40.970000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 08:42:40.972909 auditctl[1273]: No rules Jul 2 08:42:40.974659 kernel: kauditd_printk_skb: 199 callbacks suppressed Jul 2 08:42:40.974803 kernel: audit: type=1305 audit(1719909760.970:213): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 08:42:40.975456 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 08:42:40.975935 systemd[1]: Stopped audit-rules.service. Jul 2 08:42:40.970000 audit[1273]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd5481caa0 a2=420 a3=0 items=0 ppid=1 pid=1273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:40.991332 kernel: audit: type=1300 audit(1719909760.970:213): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd5481caa0 a2=420 a3=0 items=0 ppid=1 pid=1273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:40.992603 systemd[1]: Starting audit-rules.service... Jul 2 08:42:40.970000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 08:42:41.004524 kernel: audit: type=1327 audit(1719909760.970:213): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 08:42:40.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.015548 kernel: audit: type=1131 audit(1719909760.973:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.041934 augenrules[1290]: No rules Jul 2 08:42:41.043839 systemd[1]: Finished audit-rules.service. Jul 2 08:42:41.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.053514 kernel: audit: type=1130 audit(1719909761.042:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.053782 sudo[1269]: pam_unix(sudo:session): session closed for user root Jul 2 08:42:41.052000 audit[1269]: USER_END pid=1269 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.052000 audit[1269]: CRED_DISP pid=1269 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.073558 kernel: audit: type=1106 audit(1719909761.052:216): pid=1269 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.073676 kernel: audit: type=1104 audit(1719909761.052:217): pid=1269 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.337801 sshd[1265]: pam_unix(sshd:session): session closed for user core Jul 2 08:42:41.355379 kernel: audit: type=1106 audit(1719909761.341:218): pid=1265 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:41.341000 audit[1265]: USER_END pid=1265 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:41.346365 systemd[1]: sshd@5-172.24.4.178:22-172.24.4.1:40004.service: Deactivated successfully. Jul 2 08:42:41.347747 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 08:42:41.354619 systemd[1]: Started sshd@6-172.24.4.178:22-172.24.4.1:40014.service. Jul 2 08:42:41.341000 audit[1265]: CRED_DISP pid=1265 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:41.367753 kernel: audit: type=1104 audit(1719909761.341:219): pid=1265 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:41.367783 systemd-logind[1133]: Session 6 logged out. Waiting for processes to exit. Jul 2 08:42:41.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.178:22-172.24.4.1:40004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.178:22-172.24.4.1:40014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.378716 kernel: audit: type=1131 audit(1719909761.341:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.178:22-172.24.4.1:40004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:41.378878 systemd-logind[1133]: Removed session 6. Jul 2 08:42:42.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:42.564000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:42.565675 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 08:42:42.566310 systemd[1]: Stopped kubelet.service. Jul 2 08:42:42.569500 systemd[1]: Starting kubelet.service... Jul 2 08:42:42.866000 audit[1296]: USER_ACCT pid=1296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:42.867814 sshd[1296]: Accepted publickey for core from 172.24.4.1 port 40014 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:42:42.869000 audit[1296]: CRED_ACQ pid=1296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:42.870000 audit[1296]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdea9f7330 a2=3 a3=0 items=0 ppid=1 pid=1296 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:42.870000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:42:42.872596 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:42:42.883433 systemd[1]: Started session-7.scope. Jul 2 08:42:42.884577 systemd-logind[1133]: New session 7 of user core. Jul 2 08:42:42.894000 audit[1296]: USER_START pid=1296 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:42.895000 audit[1300]: CRED_ACQ pid=1300 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:42:42.909024 systemd[1]: Started kubelet.service. Jul 2 08:42:42.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:43.135099 kubelet[1303]: E0702 08:42:43.134906 1303 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:42:43.138107 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:42:43.138350 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:42:43.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:42:43.297000 audit[1310]: USER_ACCT pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:43.298809 sudo[1310]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 08:42:43.297000 audit[1310]: CRED_REFR pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:43.299330 sudo[1310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 08:42:43.301000 audit[1310]: USER_START pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:42:43.353756 systemd[1]: Starting docker.service... Jul 2 08:42:43.414159 env[1320]: time="2024-07-02T08:42:43.413756044Z" level=info msg="Starting up" Jul 2 08:42:43.418202 env[1320]: time="2024-07-02T08:42:43.418127815Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 08:42:43.418253 env[1320]: time="2024-07-02T08:42:43.418205699Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 08:42:43.418311 env[1320]: time="2024-07-02T08:42:43.418269171Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 08:42:43.418355 env[1320]: time="2024-07-02T08:42:43.418309515Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 08:42:43.425040 env[1320]: time="2024-07-02T08:42:43.424976420Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 08:42:43.425040 env[1320]: time="2024-07-02T08:42:43.425028384Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 08:42:43.425129 env[1320]: time="2024-07-02T08:42:43.425067246Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 08:42:43.425129 env[1320]: time="2024-07-02T08:42:43.425091625Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 08:42:43.435422 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2486869330-merged.mount: Deactivated successfully. Jul 2 08:42:43.500097 env[1320]: time="2024-07-02T08:42:43.500029293Z" level=info msg="Loading containers: start." Jul 2 08:42:43.652000 audit[1351]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.652000 audit[1351]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe9e929350 a2=0 a3=7ffe9e92933c items=0 ppid=1320 pid=1351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.652000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 08:42:43.656000 audit[1353]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.656000 audit[1353]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe96726610 a2=0 a3=7ffe967265fc items=0 ppid=1320 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.656000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 08:42:43.660000 audit[1355]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.660000 audit[1355]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff3490d930 a2=0 a3=7fff3490d91c items=0 ppid=1320 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 08:42:43.664000 audit[1357]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.664000 audit[1357]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffccc2a01a0 a2=0 a3=7ffccc2a018c items=0 ppid=1320 pid=1357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 08:42:43.671000 audit[1359]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1359 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.671000 audit[1359]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc3cacb8d0 a2=0 a3=7ffc3cacb8bc items=0 ppid=1320 pid=1359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 08:42:43.706000 audit[1364]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.706000 audit[1364]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffee68e3370 a2=0 a3=7ffee68e335c items=0 ppid=1320 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.706000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 08:42:43.729000 audit[1366]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.729000 audit[1366]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff935a2fb0 a2=0 a3=7fff935a2f9c items=0 ppid=1320 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 08:42:43.733000 audit[1368]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.733000 audit[1368]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffcca9edfe0 a2=0 a3=7ffcca9edfcc items=0 ppid=1320 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.733000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 08:42:43.737000 audit[1370]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.737000 audit[1370]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff8f2eba60 a2=0 a3=7fff8f2eba4c items=0 ppid=1320 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.737000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:42:43.751000 audit[1374]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.751000 audit[1374]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc7fcea390 a2=0 a3=7ffc7fcea37c items=0 ppid=1320 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.751000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:42:43.753000 audit[1375]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.753000 audit[1375]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe1bbc9a50 a2=0 a3=7ffe1bbc9a3c items=0 ppid=1320 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.753000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:42:43.782565 kernel: Initializing XFRM netlink socket Jul 2 08:42:43.863949 env[1320]: time="2024-07-02T08:42:43.863826365Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 08:42:43.906000 audit[1383]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.906000 audit[1383]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe057e23d0 a2=0 a3=7ffe057e23bc items=0 ppid=1320 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.906000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 08:42:43.930000 audit[1386]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.930000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc84100ed0 a2=0 a3=7ffc84100ebc items=0 ppid=1320 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.930000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 08:42:43.936000 audit[1389]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.936000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeec1dfc80 a2=0 a3=7ffeec1dfc6c items=0 ppid=1320 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.936000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 08:42:43.940000 audit[1391]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.940000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe67c9fee0 a2=0 a3=7ffe67c9fecc items=0 ppid=1320 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 08:42:43.943000 audit[1393]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.943000 audit[1393]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffece9c2750 a2=0 a3=7ffece9c273c items=0 ppid=1320 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.943000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 08:42:43.947000 audit[1395]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.947000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe16e67e80 a2=0 a3=7ffe16e67e6c items=0 ppid=1320 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.947000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 08:42:43.950000 audit[1397]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.950000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe9aaccfc0 a2=0 a3=7ffe9aaccfac items=0 ppid=1320 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 08:42:43.966000 audit[1400]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.966000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff720182d0 a2=0 a3=7fff720182bc items=0 ppid=1320 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.966000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 08:42:43.969000 audit[1402]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.969000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffca801bc60 a2=0 a3=7ffca801bc4c items=0 ppid=1320 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.969000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 08:42:43.974000 audit[1404]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.974000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff5e57aa20 a2=0 a3=7fff5e57aa0c items=0 ppid=1320 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.974000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 08:42:43.978000 audit[1406]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.978000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffd58cea50 a2=0 a3=7fffd58cea3c items=0 ppid=1320 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 08:42:43.980389 systemd-networkd[969]: docker0: Link UP Jul 2 08:42:43.995000 audit[1410]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.995000 audit[1410]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe460ab1a0 a2=0 a3=7ffe460ab18c items=0 ppid=1320 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.995000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:42:43.997000 audit[1411]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:42:43.997000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd13b809e0 a2=0 a3=7ffd13b809cc items=0 ppid=1320 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:42:43.997000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 08:42:43.998431 env[1320]: time="2024-07-02T08:42:43.998407008Z" level=info msg="Loading containers: done." Jul 2 08:42:44.030359 env[1320]: time="2024-07-02T08:42:44.030312046Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 08:42:44.030814 env[1320]: time="2024-07-02T08:42:44.030796580Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 08:42:44.031037 env[1320]: time="2024-07-02T08:42:44.031021676Z" level=info msg="Daemon has completed initialization" Jul 2 08:42:44.068020 systemd[1]: Started docker.service. Jul 2 08:42:44.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:44.074764 env[1320]: time="2024-07-02T08:42:44.074707000Z" level=info msg="API listen on /run/docker.sock" Jul 2 08:42:45.464615 env[1144]: time="2024-07-02T08:42:45.464505644Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.2\"" Jul 2 08:42:46.193436 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1293756251.mount: Deactivated successfully. Jul 2 08:42:48.999412 env[1144]: time="2024-07-02T08:42:48.999337166Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:49.003270 env[1144]: time="2024-07-02T08:42:49.003211345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:56ce0fd9fb532bcb552ddbdbe3064189ce823a71693d97ff7a0a7a4ff6bffbbe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:49.008277 env[1144]: time="2024-07-02T08:42:49.008216346Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:49.011842 env[1144]: time="2024-07-02T08:42:49.011793380Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:340ab4a1d66a60630a7a298aa0b2576fcd82e51ecdddb751cf61e5d3846fde2d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:49.014269 env[1144]: time="2024-07-02T08:42:49.014207522Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.30.2\" returns image reference \"sha256:56ce0fd9fb532bcb552ddbdbe3064189ce823a71693d97ff7a0a7a4ff6bffbbe\"" Jul 2 08:42:49.027013 env[1144]: time="2024-07-02T08:42:49.026971581Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.2\"" Jul 2 08:42:52.360300 env[1144]: time="2024-07-02T08:42:52.360133944Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:52.365955 env[1144]: time="2024-07-02T08:42:52.365890209Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e874818b3caac34f68704eb96bf248d0c8116b1262ab549d45d39dd3dd775974,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:52.370924 env[1144]: time="2024-07-02T08:42:52.370873978Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:52.373654 env[1144]: time="2024-07-02T08:42:52.373606828Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:4c412bc1fc585ddeba10d34a02e7507ea787ec2c57256d4c18fd230377ab048e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:52.376049 env[1144]: time="2024-07-02T08:42:52.375993907Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.30.2\" returns image reference \"sha256:e874818b3caac34f68704eb96bf248d0c8116b1262ab549d45d39dd3dd775974\"" Jul 2 08:42:52.395022 env[1144]: time="2024-07-02T08:42:52.394973235Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.2\"" Jul 2 08:42:53.179119 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 2 08:42:53.179719 systemd[1]: Stopped kubelet.service. Jul 2 08:42:53.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:53.182122 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 08:42:53.182207 kernel: audit: type=1130 audit(1719909773.178:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:53.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:53.197897 systemd[1]: Starting kubelet.service... Jul 2 08:42:53.207539 kernel: audit: type=1131 audit(1719909773.190:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:53.969894 systemd[1]: Started kubelet.service. Jul 2 08:42:53.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:53.979539 kernel: audit: type=1130 audit(1719909773.969:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:42:54.152560 kubelet[1463]: E0702 08:42:54.151934 1463 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:42:54.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:42:54.156557 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:42:54.156849 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:42:54.165499 kernel: audit: type=1131 audit(1719909774.156:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:42:55.024054 env[1144]: time="2024-07-02T08:42:55.024003361Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:55.032697 env[1144]: time="2024-07-02T08:42:55.032594991Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7820c83aa139453522e9028341d0d4f23ca2721ec80c7a47425446d11157b940,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:55.049023 env[1144]: time="2024-07-02T08:42:55.048883775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:55.055115 env[1144]: time="2024-07-02T08:42:55.055042905Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:0ed75a333704f5d315395c6ec04d7af7405715537069b65d40b43ec1c8e030bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:55.057264 env[1144]: time="2024-07-02T08:42:55.057200665Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.30.2\" returns image reference \"sha256:7820c83aa139453522e9028341d0d4f23ca2721ec80c7a47425446d11157b940\"" Jul 2 08:42:55.081079 env[1144]: time="2024-07-02T08:42:55.080956614Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.2\"" Jul 2 08:42:57.173651 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3919577200.mount: Deactivated successfully. Jul 2 08:42:58.382355 env[1144]: time="2024-07-02T08:42:58.382193777Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:58.386948 env[1144]: time="2024-07-02T08:42:58.386831296Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53c535741fb446f6b34d720fdc5748db368ef96771111f3892682e6eab8f3772,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:58.391432 env[1144]: time="2024-07-02T08:42:58.391359298Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:58.394988 env[1144]: time="2024-07-02T08:42:58.394893432Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8a44c6e094af3dea3de57fa967e201608a358a3bd8b4e3f31ab905bbe4108aec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:42:58.396051 env[1144]: time="2024-07-02T08:42:58.395963097Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.30.2\" returns image reference \"sha256:53c535741fb446f6b34d720fdc5748db368ef96771111f3892682e6eab8f3772\"" Jul 2 08:42:58.418674 env[1144]: time="2024-07-02T08:42:58.418601583Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Jul 2 08:42:59.050513 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount98863883.mount: Deactivated successfully. Jul 2 08:43:00.752294 env[1144]: time="2024-07-02T08:43:00.752178783Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:00.757193 env[1144]: time="2024-07-02T08:43:00.757143199Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:00.761398 env[1144]: time="2024-07-02T08:43:00.761347693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:00.765176 env[1144]: time="2024-07-02T08:43:00.765125725Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:00.767670 env[1144]: time="2024-07-02T08:43:00.767589225Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Jul 2 08:43:00.781897 env[1144]: time="2024-07-02T08:43:00.781828781Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 08:43:01.419376 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3968904046.mount: Deactivated successfully. Jul 2 08:43:01.432101 env[1144]: time="2024-07-02T08:43:01.432010036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:01.434846 env[1144]: time="2024-07-02T08:43:01.434789695Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:01.437971 env[1144]: time="2024-07-02T08:43:01.437913518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:01.441277 env[1144]: time="2024-07-02T08:43:01.441221955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:01.442770 env[1144]: time="2024-07-02T08:43:01.442711561Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Jul 2 08:43:01.465806 env[1144]: time="2024-07-02T08:43:01.465700319Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\"" Jul 2 08:43:02.076157 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount231036002.mount: Deactivated successfully. Jul 2 08:43:03.831167 update_engine[1134]: I0702 08:43:03.828862 1134 update_attempter.cc:509] Updating boot flags... Jul 2 08:43:04.177181 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 2 08:43:04.177512 systemd[1]: Stopped kubelet.service. Jul 2 08:43:04.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:04.187440 kernel: audit: type=1130 audit(1719909784.176:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:04.187645 kernel: audit: type=1131 audit(1719909784.176:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:04.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:04.181031 systemd[1]: Starting kubelet.service... Jul 2 08:43:04.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:04.333547 systemd[1]: Started kubelet.service. Jul 2 08:43:04.337639 kernel: audit: type=1130 audit(1719909784.332:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:04.674260 kubelet[1513]: E0702 08:43:04.670179 1513 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 08:43:04.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:43:04.678004 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 08:43:04.678282 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 08:43:04.684341 kernel: audit: type=1131 audit(1719909784.677:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:43:06.056404 env[1144]: time="2024-07-02T08:43:06.056345107Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:06.059965 env[1144]: time="2024-07-02T08:43:06.059920158Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3861cfcd7c04ccac1f062788eca39487248527ef0c0cfd477a83d7691a75a899,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:06.063428 env[1144]: time="2024-07-02T08:43:06.063390469Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.12-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:06.066425 env[1144]: time="2024-07-02T08:43:06.066330583Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:44a8e24dcbba3470ee1fee21d5e88d128c936e9b55d4bc51fbef8086f8ed123b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:06.069927 env[1144]: time="2024-07-02T08:43:06.069862446Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.12-0\" returns image reference \"sha256:3861cfcd7c04ccac1f062788eca39487248527ef0c0cfd477a83d7691a75a899\"" Jul 2 08:43:09.944238 systemd[1]: Stopped kubelet.service. Jul 2 08:43:09.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:09.948662 systemd[1]: Starting kubelet.service... Jul 2 08:43:09.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:09.962078 kernel: audit: type=1130 audit(1719909789.944:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:09.962150 kernel: audit: type=1131 audit(1719909789.944:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:09.997851 systemd[1]: Reloading. Jul 2 08:43:10.100798 /usr/lib/systemd/system-generators/torcx-generator[1610]: time="2024-07-02T08:43:10Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:43:10.100834 /usr/lib/systemd/system-generators/torcx-generator[1610]: time="2024-07-02T08:43:10Z" level=info msg="torcx already run" Jul 2 08:43:10.238440 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:43:10.238480 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:43:10.281106 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.389494 kernel: audit: type=1400 audit(1719909790.376:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.389549 kernel: audit: type=1400 audit(1719909790.376:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.406235 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 08:43:10.406398 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 08:43:10.406456 kernel: audit: type=1400 audit(1719909790.376:271): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.406552 kernel: audit: backlog limit exceeded Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.408589 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 08:43:10.408684 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit: BPF prog-id=46 op=LOAD Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.389000 audit: BPF prog-id=47 op=LOAD Jul 2 08:43:10.389000 audit: BPF prog-id=30 op=UNLOAD Jul 2 08:43:10.389000 audit: BPF prog-id=31 op=UNLOAD Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.390000 audit: BPF prog-id=48 op=LOAD Jul 2 08:43:10.390000 audit: BPF prog-id=32 op=UNLOAD Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit: BPF prog-id=49 op=LOAD Jul 2 08:43:10.393000 audit: BPF prog-id=41 op=UNLOAD Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit: BPF prog-id=50 op=LOAD Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.394000 audit: BPF prog-id=51 op=LOAD Jul 2 08:43:10.394000 audit: BPF prog-id=42 op=UNLOAD Jul 2 08:43:10.394000 audit: BPF prog-id=43 op=UNLOAD Jul 2 08:43:10.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit: BPF prog-id=58 op=LOAD Jul 2 08:43:10.414000 audit: BPF prog-id=36 op=UNLOAD Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit: BPF prog-id=59 op=LOAD Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:10.414000 audit: BPF prog-id=60 op=LOAD Jul 2 08:43:10.414000 audit: BPF prog-id=37 op=UNLOAD Jul 2 08:43:10.414000 audit: BPF prog-id=38 op=UNLOAD Jul 2 08:43:10.439850 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 2 08:43:10.439923 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 2 08:43:10.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 08:43:10.440112 systemd[1]: Stopped kubelet.service. Jul 2 08:43:10.441717 systemd[1]: Starting kubelet.service... Jul 2 08:43:10.612238 systemd[1]: Started kubelet.service. Jul 2 08:43:10.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:11.331945 kubelet[1658]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:43:11.331945 kubelet[1658]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 08:43:11.331945 kubelet[1658]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:43:11.335096 kubelet[1658]: I0702 08:43:11.335000 1658 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 08:43:12.140399 kubelet[1658]: I0702 08:43:12.140330 1658 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Jul 2 08:43:12.140970 kubelet[1658]: I0702 08:43:12.140938 1658 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 08:43:12.141714 kubelet[1658]: I0702 08:43:12.141679 1658 server.go:927] "Client rotation is on, will bootstrap in background" Jul 2 08:43:12.598644 kubelet[1658]: I0702 08:43:12.597179 1658 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 08:43:12.600201 kubelet[1658]: E0702 08:43:12.600142 1658 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.178:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.626952 kubelet[1658]: I0702 08:43:12.626904 1658 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 08:43:12.627721 kubelet[1658]: I0702 08:43:12.627660 1658 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 08:43:12.628296 kubelet[1658]: I0702 08:43:12.627890 1658 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510-3-5-1-a8b80a6678.novalocal","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 08:43:12.630315 kubelet[1658]: I0702 08:43:12.630278 1658 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 08:43:12.630520 kubelet[1658]: I0702 08:43:12.630495 1658 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 08:43:12.630881 kubelet[1658]: I0702 08:43:12.630853 1658 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:43:12.634123 kubelet[1658]: I0702 08:43:12.634052 1658 kubelet.go:400] "Attempting to sync node with API server" Jul 2 08:43:12.634123 kubelet[1658]: I0702 08:43:12.634124 1658 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 08:43:12.634325 kubelet[1658]: I0702 08:43:12.634173 1658 kubelet.go:312] "Adding apiserver pod source" Jul 2 08:43:12.634325 kubelet[1658]: I0702 08:43:12.634206 1658 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 08:43:12.635236 kubelet[1658]: W0702 08:43:12.635145 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.24.4.178:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-1-a8b80a6678.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.635539 kubelet[1658]: E0702 08:43:12.635507 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.178:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-1-a8b80a6678.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.656443 kubelet[1658]: I0702 08:43:12.656345 1658 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 08:43:12.668230 kubelet[1658]: I0702 08:43:12.668138 1658 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 08:43:12.668552 kubelet[1658]: W0702 08:43:12.668301 1658 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 08:43:12.671141 kubelet[1658]: I0702 08:43:12.669901 1658 server.go:1264] "Started kubelet" Jul 2 08:43:12.671141 kubelet[1658]: W0702 08:43:12.670249 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.24.4.178:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.671141 kubelet[1658]: E0702 08:43:12.670376 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.178:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.719000 audit[1658]: AVC avc: denied { mac_admin } for pid=1658 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:12.719000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:12.719000 audit[1658]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c3b530 a1=c000d2e1b0 a2=c000c3b500 a3=25 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.719000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:12.720656 kubelet[1658]: I0702 08:43:12.719688 1658 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 08:43:12.720952 kubelet[1658]: I0702 08:43:12.720905 1658 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 08:43:12.720000 audit[1658]: AVC avc: denied { mac_admin } for pid=1658 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:12.720000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:12.720000 audit[1658]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c4d980 a1=c000d2e1c8 a2=c000c3b5c0 a3=25 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.720000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:12.721886 kubelet[1658]: I0702 08:43:12.721856 1658 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 08:43:12.730628 kubelet[1658]: I0702 08:43:12.692056 1658 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 08:43:12.742000 audit[1670]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1670 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.742000 audit[1670]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffee941e890 a2=0 a3=7ffee941e87c items=0 ppid=1658 pid=1670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 08:43:12.744000 audit[1671]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1671 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.744000 audit[1671]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1f1b0350 a2=0 a3=7ffc1f1b033c items=0 ppid=1658 pid=1671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.744000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 08:43:12.749000 audit[1673]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1673 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.749000 audit[1673]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd8c710640 a2=0 a3=7ffd8c71062c items=0 ppid=1658 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.749000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:43:12.755000 audit[1675]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1675 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.755000 audit[1675]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe5451b8b0 a2=0 a3=7ffe5451b89c items=0 ppid=1658 pid=1675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:43:12.757109 kubelet[1658]: I0702 08:43:12.757056 1658 server.go:455] "Adding debug handlers to kubelet server" Jul 2 08:43:12.759068 kubelet[1658]: I0702 08:43:12.735553 1658 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Jul 2 08:43:12.759068 kubelet[1658]: I0702 08:43:12.692161 1658 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 08:43:12.759555 kubelet[1658]: I0702 08:43:12.759415 1658 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 08:43:12.759555 kubelet[1658]: E0702 08:43:12.737737 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.178:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-1-a8b80a6678.novalocal?timeout=10s\": dial tcp 172.24.4.178:6443: connect: connection refused" interval="200ms" Jul 2 08:43:12.759555 kubelet[1658]: I0702 08:43:12.735066 1658 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 08:43:12.760076 kubelet[1658]: W0702 08:43:12.737548 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.24.4.178:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.760076 kubelet[1658]: E0702 08:43:12.759740 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.178:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.760076 kubelet[1658]: I0702 08:43:12.759836 1658 reconciler.go:26] "Reconciler: start to sync state" Jul 2 08:43:12.760615 kubelet[1658]: I0702 08:43:12.760550 1658 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 08:43:12.763542 kubelet[1658]: E0702 08:43:12.763218 1658 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.24.4.178:6443/api/v1/namespaces/default/events\": dial tcp 172.24.4.178:6443: connect: connection refused" event="&Event{ObjectMeta:{ci-3510-3-5-1-a8b80a6678.novalocal.17de58d80dcd5965 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ci-3510-3-5-1-a8b80a6678.novalocal,UID:ci-3510-3-5-1-a8b80a6678.novalocal,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ci-3510-3-5-1-a8b80a6678.novalocal,},FirstTimestamp:2024-07-02 08:43:12.669849957 +0000 UTC m=+2.050936081,LastTimestamp:2024-07-02 08:43:12.669849957 +0000 UTC m=+2.050936081,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ci-3510-3-5-1-a8b80a6678.novalocal,}" Jul 2 08:43:12.765108 kubelet[1658]: I0702 08:43:12.765057 1658 factory.go:221] Registration of the containerd container factory successfully Jul 2 08:43:12.765108 kubelet[1658]: I0702 08:43:12.765102 1658 factory.go:221] Registration of the systemd container factory successfully Jul 2 08:43:12.768778 kubelet[1658]: E0702 08:43:12.768677 1658 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 08:43:12.797000 audit[1682]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1682 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.797000 audit[1682]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff1e1080f0 a2=0 a3=7fff1e1080dc items=0 ppid=1658 pid=1682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.797000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 08:43:12.798743 kubelet[1658]: I0702 08:43:12.798650 1658 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 08:43:12.800000 audit[1683]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1683 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:12.800000 audit[1683]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe8eeb9d30 a2=0 a3=7ffe8eeb9d1c items=0 ppid=1658 pid=1683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 08:43:12.801632 kubelet[1658]: I0702 08:43:12.801598 1658 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 08:43:12.801821 kubelet[1658]: I0702 08:43:12.801798 1658 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 08:43:12.802002 kubelet[1658]: I0702 08:43:12.801979 1658 kubelet.go:2337] "Starting kubelet main sync loop" Jul 2 08:43:12.802304 kubelet[1658]: E0702 08:43:12.802244 1658 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 08:43:12.803000 audit[1684]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1684 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.803000 audit[1684]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2d096940 a2=0 a3=7fff2d09692c items=0 ppid=1658 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.803000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 08:43:12.806502 kubelet[1658]: W0702 08:43:12.806447 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.24.4.178:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.806621 kubelet[1658]: E0702 08:43:12.806524 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.178:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:12.806000 audit[1686]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1686 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:12.806000 audit[1686]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdad9fbd90 a2=0 a3=7ffdad9fbd7c items=0 ppid=1658 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.806000 audit[1685]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1685 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.806000 audit[1685]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2997b7f0 a2=0 a3=7ffe2997b7dc items=0 ppid=1658 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.806000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 08:43:12.806000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 08:43:12.807000 audit[1688]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1688 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:12.807000 audit[1688]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc796ef220 a2=0 a3=7ffc796ef20c items=0 ppid=1658 pid=1688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.807000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 08:43:12.807000 audit[1687]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1687 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:12.807000 audit[1687]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffecd531e00 a2=0 a3=7ffecd531dec items=0 ppid=1658 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.807000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 08:43:12.808000 audit[1689]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1689 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:12.808000 audit[1689]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffef44b07f0 a2=0 a3=7ffef44b07dc items=0 ppid=1658 pid=1689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.808000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 08:43:12.837822 kubelet[1658]: I0702 08:43:12.837752 1658 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.838157 kubelet[1658]: E0702 08:43:12.838134 1658 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.178:6443/api/v1/nodes\": dial tcp 172.24.4.178:6443: connect: connection refused" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.838596 kubelet[1658]: I0702 08:43:12.838571 1658 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 08:43:12.838681 kubelet[1658]: I0702 08:43:12.838670 1658 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 08:43:12.838760 kubelet[1658]: I0702 08:43:12.838750 1658 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:43:12.847879 kubelet[1658]: I0702 08:43:12.847865 1658 policy_none.go:49] "None policy: Start" Jul 2 08:43:12.848603 kubelet[1658]: I0702 08:43:12.848590 1658 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 08:43:12.848775 kubelet[1658]: I0702 08:43:12.848689 1658 state_mem.go:35] "Initializing new in-memory state store" Jul 2 08:43:12.861776 systemd[1]: Created slice kubepods.slice. Jul 2 08:43:12.868446 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 08:43:12.872575 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 08:43:12.881874 kubelet[1658]: I0702 08:43:12.881393 1658 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 08:43:12.881000 audit[1658]: AVC avc: denied { mac_admin } for pid=1658 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:12.881000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:12.881000 audit[1658]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b47470 a1=c000dad7d0 a2=c000b47440 a3=25 items=0 ppid=1 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:12.881000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:12.882396 kubelet[1658]: I0702 08:43:12.882019 1658 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 08:43:12.882396 kubelet[1658]: I0702 08:43:12.882175 1658 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 2 08:43:12.882396 kubelet[1658]: I0702 08:43:12.882290 1658 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 08:43:12.884704 kubelet[1658]: E0702 08:43:12.884661 1658 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-5-1-a8b80a6678.novalocal\" not found" Jul 2 08:43:12.903524 kubelet[1658]: I0702 08:43:12.903419 1658 topology_manager.go:215] "Topology Admit Handler" podUID="edc5b5e7e98514b1610786e0ac767e99" podNamespace="kube-system" podName="kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.905675 kubelet[1658]: I0702 08:43:12.905633 1658 topology_manager.go:215] "Topology Admit Handler" podUID="e05a0a2830775f3e0731db5299ba535d" podNamespace="kube-system" podName="kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.907269 kubelet[1658]: I0702 08:43:12.907229 1658 topology_manager.go:215] "Topology Admit Handler" podUID="17484c12d5c8d20a8db20f1c6ea6c077" podNamespace="kube-system" podName="kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.917387 systemd[1]: Created slice kubepods-burstable-pode05a0a2830775f3e0731db5299ba535d.slice. Jul 2 08:43:12.929134 systemd[1]: Created slice kubepods-burstable-podedc5b5e7e98514b1610786e0ac767e99.slice. Jul 2 08:43:12.939739 systemd[1]: Created slice kubepods-burstable-pod17484c12d5c8d20a8db20f1c6ea6c077.slice. Jul 2 08:43:12.960556 kubelet[1658]: I0702 08:43:12.960498 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-ca-certs\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.960848 kubelet[1658]: E0702 08:43:12.960789 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.178:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-1-a8b80a6678.novalocal?timeout=10s\": dial tcp 172.24.4.178:6443: connect: connection refused" interval="400ms" Jul 2 08:43:12.961066 kubelet[1658]: I0702 08:43:12.961023 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.961279 kubelet[1658]: I0702 08:43:12.961245 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/17484c12d5c8d20a8db20f1c6ea6c077-kubeconfig\") pod \"kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"17484c12d5c8d20a8db20f1c6ea6c077\") " pod="kube-system/kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.961543 kubelet[1658]: I0702 08:43:12.961457 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/edc5b5e7e98514b1610786e0ac767e99-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"edc5b5e7e98514b1610786e0ac767e99\") " pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.961791 kubelet[1658]: I0702 08:43:12.961755 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.962003 kubelet[1658]: I0702 08:43:12.961969 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.962245 kubelet[1658]: I0702 08:43:12.962204 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.962437 kubelet[1658]: I0702 08:43:12.962405 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/edc5b5e7e98514b1610786e0ac767e99-ca-certs\") pod \"kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"edc5b5e7e98514b1610786e0ac767e99\") " pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:12.962683 kubelet[1658]: I0702 08:43:12.962648 1658 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/edc5b5e7e98514b1610786e0ac767e99-k8s-certs\") pod \"kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"edc5b5e7e98514b1610786e0ac767e99\") " pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:13.042206 kubelet[1658]: I0702 08:43:13.042158 1658 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:13.043195 kubelet[1658]: E0702 08:43:13.043146 1658 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.178:6443/api/v1/nodes\": dial tcp 172.24.4.178:6443: connect: connection refused" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:13.228303 env[1144]: time="2024-07-02T08:43:13.227897484Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal,Uid:e05a0a2830775f3e0731db5299ba535d,Namespace:kube-system,Attempt:0,}" Jul 2 08:43:13.237577 env[1144]: time="2024-07-02T08:43:13.237062812Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal,Uid:edc5b5e7e98514b1610786e0ac767e99,Namespace:kube-system,Attempt:0,}" Jul 2 08:43:13.247535 env[1144]: time="2024-07-02T08:43:13.247415413Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal,Uid:17484c12d5c8d20a8db20f1c6ea6c077,Namespace:kube-system,Attempt:0,}" Jul 2 08:43:13.361884 kubelet[1658]: E0702 08:43:13.361784 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.178:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-1-a8b80a6678.novalocal?timeout=10s\": dial tcp 172.24.4.178:6443: connect: connection refused" interval="800ms" Jul 2 08:43:13.447626 kubelet[1658]: I0702 08:43:13.447578 1658 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:13.448515 kubelet[1658]: E0702 08:43:13.448417 1658 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.178:6443/api/v1/nodes\": dial tcp 172.24.4.178:6443: connect: connection refused" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:13.577293 kubelet[1658]: W0702 08:43:13.576134 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://172.24.4.178:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:13.577293 kubelet[1658]: E0702 08:43:13.576211 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.178:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:13.845369 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3486020877.mount: Deactivated successfully. Jul 2 08:43:13.863750 env[1144]: time="2024-07-02T08:43:13.863646150Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.879358 env[1144]: time="2024-07-02T08:43:13.879283976Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.883920 env[1144]: time="2024-07-02T08:43:13.883838258Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.887380 env[1144]: time="2024-07-02T08:43:13.887304590Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.890292 env[1144]: time="2024-07-02T08:43:13.890221952Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.894531 env[1144]: time="2024-07-02T08:43:13.894413478Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.896680 env[1144]: time="2024-07-02T08:43:13.896606158Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.899841 env[1144]: time="2024-07-02T08:43:13.899777999Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.905325 env[1144]: time="2024-07-02T08:43:13.905237746Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.908605 env[1144]: time="2024-07-02T08:43:13.908538433Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.917425 env[1144]: time="2024-07-02T08:43:13.915070040Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.924872 env[1144]: time="2024-07-02T08:43:13.924783164Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:13.979364 env[1144]: time="2024-07-02T08:43:13.979150846Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:13.979827 env[1144]: time="2024-07-02T08:43:13.979728628Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:13.980131 env[1144]: time="2024-07-02T08:43:13.980047274Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:13.981611 env[1144]: time="2024-07-02T08:43:13.981191367Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/06b74eaae46266e10971596ef8e79170671404fb0bd9da3f5d82a0831101e433 pid=1697 runtime=io.containerd.runc.v2 Jul 2 08:43:14.010895 systemd[1]: Started cri-containerd-06b74eaae46266e10971596ef8e79170671404fb0bd9da3f5d82a0831101e433.scope. Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.028000 audit: BPF prog-id=61 op=LOAD Jul 2 08:43:14.029000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.029000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=1697 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623734656161653436323636653130393731353936656638653739 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=1697 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623734656161653436323636653130393731353936656638653739 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.030000 audit: BPF prog-id=62 op=LOAD Jul 2 08:43:14.030000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0003773c0 items=0 ppid=1697 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623734656161653436323636653130393731353936656638653739 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.032000 audit: BPF prog-id=63 op=LOAD Jul 2 08:43:14.032000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000377408 items=0 ppid=1697 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623734656161653436323636653130393731353936656638653739 Jul 2 08:43:14.032000 audit: BPF prog-id=63 op=UNLOAD Jul 2 08:43:14.032000 audit: BPF prog-id=62 op=UNLOAD Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.033000 audit: BPF prog-id=64 op=LOAD Jul 2 08:43:14.033000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000377818 items=0 ppid=1697 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036623734656161653436323636653130393731353936656638653739 Jul 2 08:43:14.055991 env[1144]: time="2024-07-02T08:43:14.054876402Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:14.055991 env[1144]: time="2024-07-02T08:43:14.054953664Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:14.055991 env[1144]: time="2024-07-02T08:43:14.054984771Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:14.055991 env[1144]: time="2024-07-02T08:43:14.055125380Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/26cea2b1d9d8f6fc675f784cff832842f0eb003834c289d8c5154a1f00ab5542 pid=1735 runtime=io.containerd.runc.v2 Jul 2 08:43:14.061895 env[1144]: time="2024-07-02T08:43:14.061689978Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:14.061895 env[1144]: time="2024-07-02T08:43:14.061739909Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:14.061895 env[1144]: time="2024-07-02T08:43:14.061753905Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:14.062429 env[1144]: time="2024-07-02T08:43:14.062376350Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/88a98de8f38a945a1590959d24d594197eec1e1887550205dc709644d34a42db pid=1742 runtime=io.containerd.runc.v2 Jul 2 08:43:14.077637 systemd[1]: Started cri-containerd-88a98de8f38a945a1590959d24d594197eec1e1887550205dc709644d34a42db.scope. Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.099000 audit: BPF prog-id=65 op=LOAD Jul 2 08:43:14.107000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.107000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1742 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613938646538663338613934356131353930393539643234643539 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1742 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613938646538663338613934356131353930393539643234643539 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.109000 audit: BPF prog-id=66 op=LOAD Jul 2 08:43:14.109000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000350bb0 items=0 ppid=1742 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613938646538663338613934356131353930393539643234643539 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit: BPF prog-id=67 op=LOAD Jul 2 08:43:14.110000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000350bf8 items=0 ppid=1742 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613938646538663338613934356131353930393539643234643539 Jul 2 08:43:14.110000 audit: BPF prog-id=67 op=UNLOAD Jul 2 08:43:14.110000 audit: BPF prog-id=66 op=UNLOAD Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { perfmon } for pid=1757 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit[1757]: AVC avc: denied { bpf } for pid=1757 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.110000 audit: BPF prog-id=68 op=LOAD Jul 2 08:43:14.110000 audit[1757]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000351008 items=0 ppid=1742 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838613938646538663338613934356131353930393539643234643539 Jul 2 08:43:14.113584 env[1144]: time="2024-07-02T08:43:14.113227065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal,Uid:edc5b5e7e98514b1610786e0ac767e99,Namespace:kube-system,Attempt:0,} returns sandbox id \"06b74eaae46266e10971596ef8e79170671404fb0bd9da3f5d82a0831101e433\"" Jul 2 08:43:14.117380 systemd[1]: Started cri-containerd-26cea2b1d9d8f6fc675f784cff832842f0eb003834c289d8c5154a1f00ab5542.scope. Jul 2 08:43:14.126273 env[1144]: time="2024-07-02T08:43:14.126235226Z" level=info msg="CreateContainer within sandbox \"06b74eaae46266e10971596ef8e79170671404fb0bd9da3f5d82a0831101e433\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.148000 audit: BPF prog-id=69 op=LOAD Jul 2 08:43:14.150000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.150000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1735 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636561326231643964386636666336373566373834636666383332 Jul 2 08:43:14.150000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.150000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1735 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636561326231643964386636666336373566373834636666383332 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.151000 audit: BPF prog-id=70 op=LOAD Jul 2 08:43:14.151000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003855f0 items=0 ppid=1735 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636561326231643964386636666336373566373834636666383332 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.152000 audit: BPF prog-id=71 op=LOAD Jul 2 08:43:14.152000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000385638 items=0 ppid=1735 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636561326231643964386636666336373566373834636666383332 Jul 2 08:43:14.154000 audit: BPF prog-id=71 op=UNLOAD Jul 2 08:43:14.154000 audit: BPF prog-id=70 op=UNLOAD Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { perfmon } for pid=1749 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit[1749]: AVC avc: denied { bpf } for pid=1749 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.154000 audit: BPF prog-id=72 op=LOAD Jul 2 08:43:14.154000 audit[1749]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000385a48 items=0 ppid=1735 pid=1749 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636561326231643964386636666336373566373834636666383332 Jul 2 08:43:14.163815 kubelet[1658]: E0702 08:43:14.163695 1658 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.178:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-5-1-a8b80a6678.novalocal?timeout=10s\": dial tcp 172.24.4.178:6443: connect: connection refused" interval="1.6s" Jul 2 08:43:14.177647 env[1144]: time="2024-07-02T08:43:14.177589738Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal,Uid:17484c12d5c8d20a8db20f1c6ea6c077,Namespace:kube-system,Attempt:0,} returns sandbox id \"88a98de8f38a945a1590959d24d594197eec1e1887550205dc709644d34a42db\"" Jul 2 08:43:14.186408 env[1144]: time="2024-07-02T08:43:14.186317675Z" level=info msg="CreateContainer within sandbox \"88a98de8f38a945a1590959d24d594197eec1e1887550205dc709644d34a42db\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 08:43:14.188013 env[1144]: time="2024-07-02T08:43:14.187974474Z" level=info msg="CreateContainer within sandbox \"06b74eaae46266e10971596ef8e79170671404fb0bd9da3f5d82a0831101e433\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"35b882a193b033161f254e92161e4e63dac5e0d1323f1e9243e285982436ff3e\"" Jul 2 08:43:14.190126 env[1144]: time="2024-07-02T08:43:14.190097449Z" level=info msg="StartContainer for \"35b882a193b033161f254e92161e4e63dac5e0d1323f1e9243e285982436ff3e\"" Jul 2 08:43:14.206717 env[1144]: time="2024-07-02T08:43:14.206673406Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal,Uid:e05a0a2830775f3e0731db5299ba535d,Namespace:kube-system,Attempt:0,} returns sandbox id \"26cea2b1d9d8f6fc675f784cff832842f0eb003834c289d8c5154a1f00ab5542\"" Jul 2 08:43:14.211342 env[1144]: time="2024-07-02T08:43:14.211301760Z" level=info msg="CreateContainer within sandbox \"26cea2b1d9d8f6fc675f784cff832842f0eb003834c289d8c5154a1f00ab5542\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 08:43:14.216926 kubelet[1658]: W0702 08:43:14.216867 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://172.24.4.178:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-1-a8b80a6678.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.220414 kubelet[1658]: E0702 08:43:14.216947 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.178:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-5-1-a8b80a6678.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.223943 systemd[1]: Started cri-containerd-35b882a193b033161f254e92161e4e63dac5e0d1323f1e9243e285982436ff3e.scope. Jul 2 08:43:14.226279 env[1144]: time="2024-07-02T08:43:14.226226248Z" level=info msg="CreateContainer within sandbox \"88a98de8f38a945a1590959d24d594197eec1e1887550205dc709644d34a42db\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"94bec8dfe415c920827e9b8f734ffdd7a1eae810594cb147763bb6b4efd7bc34\"" Jul 2 08:43:14.227742 env[1144]: time="2024-07-02T08:43:14.227702033Z" level=info msg="StartContainer for \"94bec8dfe415c920827e9b8f734ffdd7a1eae810594cb147763bb6b4efd7bc34\"" Jul 2 08:43:14.238256 kubelet[1658]: W0702 08:43:14.238202 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://172.24.4.178:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.238481 kubelet[1658]: E0702 08:43:14.238437 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.178:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.255221 kubelet[1658]: I0702 08:43:14.255176 1658 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:14.255802 kubelet[1658]: E0702 08:43:14.255781 1658 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://172.24.4.178:6443/api/v1/nodes\": dial tcp 172.24.4.178:6443: connect: connection refused" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.256000 audit: BPF prog-id=73 op=LOAD Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1697 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623838326131393362303333313631663235346539323136316534 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1697 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623838326131393362303333313631663235346539323136316534 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.257000 audit: BPF prog-id=74 op=LOAD Jul 2 08:43:14.257000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031c580 items=0 ppid=1697 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623838326131393362303333313631663235346539323136316534 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit: BPF prog-id=75 op=LOAD Jul 2 08:43:14.258000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031c5c8 items=0 ppid=1697 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623838326131393362303333313631663235346539323136316534 Jul 2 08:43:14.258000 audit: BPF prog-id=75 op=UNLOAD Jul 2 08:43:14.258000 audit: BPF prog-id=74 op=UNLOAD Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.258000 audit: BPF prog-id=76 op=LOAD Jul 2 08:43:14.258000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031c9d8 items=0 ppid=1697 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623838326131393362303333313631663235346539323136316534 Jul 2 08:43:14.293603 systemd[1]: Started cri-containerd-94bec8dfe415c920827e9b8f734ffdd7a1eae810594cb147763bb6b4efd7bc34.scope. Jul 2 08:43:14.298706 env[1144]: time="2024-07-02T08:43:14.298660842Z" level=info msg="CreateContainer within sandbox \"26cea2b1d9d8f6fc675f784cff832842f0eb003834c289d8c5154a1f00ab5542\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"6ded72d8dcb7967ae902c32917ac746bb740df2b6eabe048812e866f22957d91\"" Jul 2 08:43:14.299671 env[1144]: time="2024-07-02T08:43:14.299647177Z" level=info msg="StartContainer for \"6ded72d8dcb7967ae902c32917ac746bb740df2b6eabe048812e866f22957d91\"" Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.319000 audit: BPF prog-id=77 op=LOAD Jul 2 08:43:14.321000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.321000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1742 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934626563386466653431356339323038323765396238663733346666 Jul 2 08:43:14.321000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.321000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1742 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934626563386466653431356339323038323765396238663733346666 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit: BPF prog-id=78 op=LOAD Jul 2 08:43:14.323000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024c00 items=0 ppid=1742 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934626563386466653431356339323038323765396238663733346666 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.323000 audit: BPF prog-id=79 op=LOAD Jul 2 08:43:14.323000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024c48 items=0 ppid=1742 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934626563386466653431356339323038323765396238663733346666 Jul 2 08:43:14.324000 audit: BPF prog-id=79 op=UNLOAD Jul 2 08:43:14.324000 audit: BPF prog-id=78 op=UNLOAD Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { perfmon } for pid=1851 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit[1851]: AVC avc: denied { bpf } for pid=1851 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.324000 audit: BPF prog-id=80 op=LOAD Jul 2 08:43:14.324000 audit[1851]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025058 items=0 ppid=1742 pid=1851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934626563386466653431356339323038323765396238663733346666 Jul 2 08:43:14.341125 systemd[1]: Started cri-containerd-6ded72d8dcb7967ae902c32917ac746bb740df2b6eabe048812e866f22957d91.scope. Jul 2 08:43:14.348739 env[1144]: time="2024-07-02T08:43:14.348688002Z" level=info msg="StartContainer for \"35b882a193b033161f254e92161e4e63dac5e0d1323f1e9243e285982436ff3e\" returns successfully" Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.375000 audit: BPF prog-id=81 op=LOAD Jul 2 08:43:14.381000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.381000 audit[1880]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1735 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.381000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656437326438646362373936376165393032633332393137616337 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1735 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656437326438646362373936376165393032633332393137616337 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.385000 audit: BPF prog-id=82 op=LOAD Jul 2 08:43:14.385000 audit[1880]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002d9d10 items=0 ppid=1735 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656437326438646362373936376165393032633332393137616337 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.386000 audit: BPF prog-id=83 op=LOAD Jul 2 08:43:14.386000 audit[1880]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002d9d58 items=0 ppid=1735 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656437326438646362373936376165393032633332393137616337 Jul 2 08:43:14.387000 audit: BPF prog-id=83 op=UNLOAD Jul 2 08:43:14.387000 audit: BPF prog-id=82 op=UNLOAD Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { perfmon } for pid=1880 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit[1880]: AVC avc: denied { bpf } for pid=1880 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:14.387000 audit: BPF prog-id=84 op=LOAD Jul 2 08:43:14.387000 audit[1880]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c4168 items=0 ppid=1735 pid=1880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:14.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656437326438646362373936376165393032633332393137616337 Jul 2 08:43:14.396708 env[1144]: time="2024-07-02T08:43:14.396658867Z" level=info msg="StartContainer for \"94bec8dfe415c920827e9b8f734ffdd7a1eae810594cb147763bb6b4efd7bc34\" returns successfully" Jul 2 08:43:14.401180 kubelet[1658]: W0702 08:43:14.401071 1658 reflector.go:547] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://172.24.4.178:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.401180 kubelet[1658]: E0702 08:43:14.401159 1658 reflector.go:150] k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.178:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.446147 env[1144]: time="2024-07-02T08:43:14.446072588Z" level=info msg="StartContainer for \"6ded72d8dcb7967ae902c32917ac746bb740df2b6eabe048812e866f22957d91\" returns successfully" Jul 2 08:43:14.681421 kubelet[1658]: E0702 08:43:14.681096 1658 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.178:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.178:6443: connect: connection refused Jul 2 08:43:14.809874 systemd[1]: run-containerd-runc-k8s.io-06b74eaae46266e10971596ef8e79170671404fb0bd9da3f5d82a0831101e433-runc.M2juRx.mount: Deactivated successfully. Jul 2 08:43:15.857687 kubelet[1658]: I0702 08:43:15.857663 1658 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:16.170000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:16.172250 kernel: kauditd_printk_skb: 712 callbacks suppressed Jul 2 08:43:16.172321 kernel: audit: type=1400 audit(1719909796.170:488): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:16.170000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009f4000 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:16.182635 kernel: audit: type=1300 audit(1719909796.170:488): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009f4000 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:16.170000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:16.188177 kernel: audit: type=1327 audit(1719909796.170:488): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:16.188317 kernel: audit: type=1400 audit(1719909796.172:489): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:16.172000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:16.172000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000baa040 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:16.198074 kernel: audit: type=1300 audit(1719909796.172:489): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000baa040 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:16.198211 kernel: audit: type=1327 audit(1719909796.172:489): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:16.172000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:17.010000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.010000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006c7e0c0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.021152 kernel: audit: type=1400 audit(1719909797.010:490): avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.021237 kernel: audit: type=1300 audit(1719909797.010:490): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006c7e0c0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.026506 kernel: audit: type=1327 audit(1719909797.010:490): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.010000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.051499 kernel: audit: type=1400 audit(1719909797.010:491): avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.010000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0026e51c0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.010000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.015000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.015000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006c7e210 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.020000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.020000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c004707140 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.020000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.020000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.020000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0026e5780 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.020000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.020000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:17.020000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006c7ecf0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:43:17.020000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:43:17.179260 kubelet[1658]: E0702 08:43:17.179211 1658 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-5-1-a8b80a6678.novalocal\" not found" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:17.273130 kubelet[1658]: I0702 08:43:17.273023 1658 kubelet_node_status.go:76] "Successfully registered node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:17.638941 kubelet[1658]: I0702 08:43:17.638808 1658 apiserver.go:52] "Watching apiserver" Jul 2 08:43:17.659355 kubelet[1658]: I0702 08:43:17.659311 1658 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Jul 2 08:43:19.236252 systemd[1]: Reloading. Jul 2 08:43:19.375608 /usr/lib/systemd/system-generators/torcx-generator[1949]: time="2024-07-02T08:43:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 08:43:19.375643 /usr/lib/systemd/system-generators/torcx-generator[1949]: time="2024-07-02T08:43:19Z" level=info msg="torcx already run" Jul 2 08:43:19.461709 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 08:43:19.461730 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 08:43:19.484767 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit: BPF prog-id=85 op=LOAD Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.566000 audit: BPF prog-id=86 op=LOAD Jul 2 08:43:19.566000 audit: BPF prog-id=46 op=UNLOAD Jul 2 08:43:19.566000 audit: BPF prog-id=47 op=UNLOAD Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.567000 audit: BPF prog-id=87 op=LOAD Jul 2 08:43:19.567000 audit: BPF prog-id=48 op=UNLOAD Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.569000 audit: BPF prog-id=88 op=LOAD Jul 2 08:43:19.569000 audit: BPF prog-id=81 op=UNLOAD Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit: BPF prog-id=89 op=LOAD Jul 2 08:43:19.572000 audit: BPF prog-id=65 op=UNLOAD Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.572000 audit: BPF prog-id=90 op=LOAD Jul 2 08:43:19.572000 audit: BPF prog-id=77 op=UNLOAD Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit: BPF prog-id=91 op=LOAD Jul 2 08:43:19.574000 audit: BPF prog-id=69 op=UNLOAD Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit: BPF prog-id=92 op=LOAD Jul 2 08:43:19.575000 audit: BPF prog-id=49 op=UNLOAD Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.575000 audit: BPF prog-id=93 op=LOAD Jul 2 08:43:19.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.576000 audit: BPF prog-id=94 op=LOAD Jul 2 08:43:19.576000 audit: BPF prog-id=50 op=UNLOAD Jul 2 08:43:19.576000 audit: BPF prog-id=51 op=UNLOAD Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit: BPF prog-id=95 op=LOAD Jul 2 08:43:19.578000 audit: BPF prog-id=52 op=UNLOAD Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit: BPF prog-id=96 op=LOAD Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.578000 audit: BPF prog-id=97 op=LOAD Jul 2 08:43:19.578000 audit: BPF prog-id=53 op=UNLOAD Jul 2 08:43:19.578000 audit: BPF prog-id=54 op=UNLOAD Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.579000 audit: BPF prog-id=98 op=LOAD Jul 2 08:43:19.579000 audit: BPF prog-id=55 op=UNLOAD Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.580000 audit: BPF prog-id=99 op=LOAD Jul 2 08:43:19.580000 audit: BPF prog-id=56 op=UNLOAD Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.581000 audit: BPF prog-id=100 op=LOAD Jul 2 08:43:19.581000 audit: BPF prog-id=57 op=UNLOAD Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.584000 audit: BPF prog-id=101 op=LOAD Jul 2 08:43:19.584000 audit: BPF prog-id=73 op=UNLOAD Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit: BPF prog-id=102 op=LOAD Jul 2 08:43:19.586000 audit: BPF prog-id=58 op=UNLOAD Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.586000 audit: BPF prog-id=103 op=LOAD Jul 2 08:43:19.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.587000 audit: BPF prog-id=104 op=LOAD Jul 2 08:43:19.587000 audit: BPF prog-id=59 op=UNLOAD Jul 2 08:43:19.587000 audit: BPF prog-id=60 op=UNLOAD Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:19.588000 audit: BPF prog-id=105 op=LOAD Jul 2 08:43:19.588000 audit: BPF prog-id=61 op=UNLOAD Jul 2 08:43:19.606773 systemd[1]: Stopping kubelet.service... Jul 2 08:43:19.628692 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 08:43:19.628903 systemd[1]: Stopped kubelet.service. Jul 2 08:43:19.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:19.628973 systemd[1]: kubelet.service: Consumed 1.576s CPU time. Jul 2 08:43:19.630901 systemd[1]: Starting kubelet.service... Jul 2 08:43:20.310000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:20.310000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f06000 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:20.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:20.312000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:20.312000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e87960 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:20.312000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:20.314000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:20.314000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e87b20 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:20.314000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:20.334000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:43:20.334000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f06a40 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:20.334000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:21.927611 systemd[1]: Started kubelet.service. Jul 2 08:43:21.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:21.930771 kernel: kauditd_printk_skb: 271 callbacks suppressed Jul 2 08:43:21.930865 kernel: audit: type=1130 audit(1719909801.926:745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:22.046764 kubelet[2000]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:43:22.047071 kubelet[2000]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 08:43:22.047123 kubelet[2000]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 08:43:22.048939 kubelet[2000]: I0702 08:43:22.048903 2000 server.go:205] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 08:43:22.064287 kubelet[2000]: I0702 08:43:22.064247 2000 server.go:484] "Kubelet version" kubeletVersion="v1.30.1" Jul 2 08:43:22.064287 kubelet[2000]: I0702 08:43:22.064281 2000 server.go:486] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 08:43:22.064533 kubelet[2000]: I0702 08:43:22.064517 2000 server.go:927] "Client rotation is on, will bootstrap in background" Jul 2 08:43:22.066555 kubelet[2000]: I0702 08:43:22.066534 2000 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 08:43:22.099607 kubelet[2000]: I0702 08:43:22.099575 2000 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 08:43:22.115837 kubelet[2000]: I0702 08:43:22.115799 2000 server.go:742] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 08:43:22.116054 kubelet[2000]: I0702 08:43:22.116018 2000 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 08:43:22.116222 kubelet[2000]: I0702 08:43:22.116050 2000 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ci-3510-3-5-1-a8b80a6678.novalocal","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 08:43:22.116402 kubelet[2000]: I0702 08:43:22.116236 2000 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 08:43:22.116402 kubelet[2000]: I0702 08:43:22.116248 2000 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 08:43:22.116402 kubelet[2000]: I0702 08:43:22.116281 2000 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:43:22.117239 kubelet[2000]: I0702 08:43:22.117224 2000 kubelet.go:400] "Attempting to sync node with API server" Jul 2 08:43:22.117317 kubelet[2000]: I0702 08:43:22.117245 2000 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 08:43:22.117727 kubelet[2000]: I0702 08:43:22.117640 2000 kubelet.go:312] "Adding apiserver pod source" Jul 2 08:43:22.143065 kubelet[2000]: I0702 08:43:22.143041 2000 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 08:43:22.144343 kubelet[2000]: I0702 08:43:22.144328 2000 kuberuntime_manager.go:261] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 08:43:22.144590 kubelet[2000]: I0702 08:43:22.144578 2000 kubelet.go:815] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 08:43:22.145041 kubelet[2000]: I0702 08:43:22.144999 2000 server.go:1264] "Started kubelet" Jul 2 08:43:22.155000 audit[2000]: AVC avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:22.162705 kernel: audit: type=1400 audit(1719909802.155:746): avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:22.162824 kernel: audit: type=1401 audit(1719909802.155:746): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:22.162889 kernel: audit: type=1300 audit(1719909802.155:746): arch=c000003e syscall=188 success=no exit=-22 a0=c000845950 a1=c000b9c450 a2=c000845920 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:22.155000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:22.155000 audit[2000]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000845950 a1=c000b9c450 a2=c000845920 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:22.163258 kubelet[2000]: I0702 08:43:22.163199 2000 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 08:43:22.164575 kubelet[2000]: I0702 08:43:22.164556 2000 server.go:455] "Adding debug handlers to kubelet server" Jul 2 08:43:22.170217 kubelet[2000]: I0702 08:43:22.168868 2000 kubelet.go:1419] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 08:43:22.170217 kubelet[2000]: I0702 08:43:22.169019 2000 kubelet.go:1423] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 08:43:22.170217 kubelet[2000]: I0702 08:43:22.169052 2000 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 08:43:22.170868 kubelet[2000]: I0702 08:43:22.170816 2000 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 08:43:22.171115 kubelet[2000]: I0702 08:43:22.171100 2000 server.go:227] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 08:43:22.155000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:22.175541 kubelet[2000]: I0702 08:43:22.175525 2000 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 08:43:22.176147 kubelet[2000]: I0702 08:43:22.176133 2000 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Jul 2 08:43:22.176426 kubelet[2000]: I0702 08:43:22.176415 2000 reconciler.go:26] "Reconciler: start to sync state" Jul 2 08:43:22.178486 kernel: audit: type=1327 audit(1719909802.155:746): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:22.167000 audit[2000]: AVC avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:22.184490 kernel: audit: type=1400 audit(1719909802.167:747): avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:22.167000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:22.188720 kernel: audit: type=1401 audit(1719909802.167:747): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:22.167000 audit[2000]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000615dc0 a1=c000b9c468 a2=c0008459e0 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:22.194508 kernel: audit: type=1300 audit(1719909802.167:747): arch=c000003e syscall=188 success=no exit=-22 a0=c000615dc0 a1=c000b9c468 a2=c0008459e0 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:22.167000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:22.200819 kernel: audit: type=1327 audit(1719909802.167:747): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:22.215146 kubelet[2000]: I0702 08:43:22.215105 2000 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 08:43:22.217527 kubelet[2000]: I0702 08:43:22.217272 2000 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 08:43:22.217527 kubelet[2000]: I0702 08:43:22.217304 2000 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 08:43:22.217527 kubelet[2000]: I0702 08:43:22.217320 2000 kubelet.go:2337] "Starting kubelet main sync loop" Jul 2 08:43:22.217527 kubelet[2000]: E0702 08:43:22.217356 2000 kubelet.go:2361] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 08:43:22.222500 kubelet[2000]: I0702 08:43:22.222448 2000 factory.go:221] Registration of the systemd container factory successfully Jul 2 08:43:22.222772 kubelet[2000]: I0702 08:43:22.222753 2000 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 08:43:22.233257 kubelet[2000]: I0702 08:43:22.233229 2000 factory.go:221] Registration of the containerd container factory successfully Jul 2 08:43:22.251236 kubelet[2000]: E0702 08:43:22.251212 2000 kubelet.go:1467] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 08:43:22.282579 kubelet[2000]: I0702 08:43:22.282558 2000 kubelet_node_status.go:73] "Attempting to register node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.283089 kubelet[2000]: I0702 08:43:22.283076 2000 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 08:43:22.283158 kubelet[2000]: I0702 08:43:22.283147 2000 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 08:43:22.283218 kubelet[2000]: I0702 08:43:22.283210 2000 state_mem.go:36] "Initialized new in-memory state store" Jul 2 08:43:22.283407 kubelet[2000]: I0702 08:43:22.283394 2000 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 08:43:22.283520 kubelet[2000]: I0702 08:43:22.283495 2000 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 08:43:22.283578 kubelet[2000]: I0702 08:43:22.283570 2000 policy_none.go:49] "None policy: Start" Jul 2 08:43:22.284246 kubelet[2000]: I0702 08:43:22.284234 2000 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 08:43:22.284325 kubelet[2000]: I0702 08:43:22.284316 2000 state_mem.go:35] "Initializing new in-memory state store" Jul 2 08:43:22.284517 kubelet[2000]: I0702 08:43:22.284505 2000 state_mem.go:75] "Updated machine memory state" Jul 2 08:43:22.288742 kubelet[2000]: I0702 08:43:22.288727 2000 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 08:43:22.287000 audit[2000]: AVC avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:22.288961 kubelet[2000]: I0702 08:43:22.288946 2000 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 08:43:22.289141 kubelet[2000]: I0702 08:43:22.289113 2000 container_log_manager.go:186] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 2 08:43:22.289281 kubelet[2000]: I0702 08:43:22.289271 2000 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 08:43:22.292485 kernel: audit: type=1400 audit(1719909802.287:748): avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:22.287000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 08:43:22.287000 audit[2000]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000844960 a1=c00102f0b0 a2=c000844930 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:22.287000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 08:43:22.303797 kubelet[2000]: I0702 08:43:22.303771 2000 kubelet_node_status.go:112] "Node was previously registered" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.304046 kubelet[2000]: I0702 08:43:22.304033 2000 kubelet_node_status.go:76] "Successfully registered node" node="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.320134 kubelet[2000]: I0702 08:43:22.320097 2000 topology_manager.go:215] "Topology Admit Handler" podUID="edc5b5e7e98514b1610786e0ac767e99" podNamespace="kube-system" podName="kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.321755 kubelet[2000]: I0702 08:43:22.321719 2000 topology_manager.go:215] "Topology Admit Handler" podUID="e05a0a2830775f3e0731db5299ba535d" podNamespace="kube-system" podName="kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.321955 kubelet[2000]: I0702 08:43:22.321938 2000 topology_manager.go:215] "Topology Admit Handler" podUID="17484c12d5c8d20a8db20f1c6ea6c077" podNamespace="kube-system" podName="kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.360549 kubelet[2000]: W0702 08:43:22.360246 2000 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:43:22.360826 kubelet[2000]: W0702 08:43:22.360809 2000 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:43:22.361096 kubelet[2000]: W0702 08:43:22.361083 2000 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Jul 2 08:43:22.379241 kubelet[2000]: I0702 08:43:22.379216 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-ca-certs\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.379472 kubelet[2000]: I0702 08:43:22.379441 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380006 kubelet[2000]: I0702 08:43:22.379947 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380158 kubelet[2000]: I0702 08:43:22.380140 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/edc5b5e7e98514b1610786e0ac767e99-ca-certs\") pod \"kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"edc5b5e7e98514b1610786e0ac767e99\") " pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380264 kubelet[2000]: I0702 08:43:22.380250 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/edc5b5e7e98514b1610786e0ac767e99-k8s-certs\") pod \"kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"edc5b5e7e98514b1610786e0ac767e99\") " pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380369 kubelet[2000]: I0702 08:43:22.380353 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/edc5b5e7e98514b1610786e0ac767e99-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"edc5b5e7e98514b1610786e0ac767e99\") " pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380503 kubelet[2000]: I0702 08:43:22.380489 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380610 kubelet[2000]: I0702 08:43:22.380595 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e05a0a2830775f3e0731db5299ba535d-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"e05a0a2830775f3e0731db5299ba535d\") " pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:22.380709 kubelet[2000]: I0702 08:43:22.380696 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/17484c12d5c8d20a8db20f1c6ea6c077-kubeconfig\") pod \"kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal\" (UID: \"17484c12d5c8d20a8db20f1c6ea6c077\") " pod="kube-system/kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:43:23.143789 kubelet[2000]: I0702 08:43:23.143691 2000 apiserver.go:52] "Watching apiserver" Jul 2 08:43:23.176633 kubelet[2000]: I0702 08:43:23.176584 2000 desired_state_of_world_populator.go:157] "Finished populating initial desired state of world" Jul 2 08:43:23.339546 kubelet[2000]: I0702 08:43:23.339491 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-5-1-a8b80a6678.novalocal" podStartSLOduration=1.339451823 podStartE2EDuration="1.339451823s" podCreationTimestamp="2024-07-02 08:43:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:43:23.309840675 +0000 UTC m=+1.357250366" watchObservedRunningTime="2024-07-02 08:43:23.339451823 +0000 UTC m=+1.386861514" Jul 2 08:43:23.387901 kubelet[2000]: I0702 08:43:23.387853 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-5-1-a8b80a6678.novalocal" podStartSLOduration=1.3878352299999999 podStartE2EDuration="1.38783523s" podCreationTimestamp="2024-07-02 08:43:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:43:23.340515642 +0000 UTC m=+1.387925363" watchObservedRunningTime="2024-07-02 08:43:23.38783523 +0000 UTC m=+1.435244921" Jul 2 08:43:23.433510 kubelet[2000]: I0702 08:43:23.433433 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-5-1-a8b80a6678.novalocal" podStartSLOduration=1.433417634 podStartE2EDuration="1.433417634s" podCreationTimestamp="2024-07-02 08:43:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:43:23.389539151 +0000 UTC m=+1.436948843" watchObservedRunningTime="2024-07-02 08:43:23.433417634 +0000 UTC m=+1.480827345" Jul 2 08:43:27.871422 sudo[1310]: pam_unix(sudo:session): session closed for user root Jul 2 08:43:27.874488 kernel: kauditd_printk_skb: 3 callbacks suppressed Jul 2 08:43:27.874619 kernel: audit: type=1106 audit(1719909807.870:749): pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:43:27.870000 audit[1310]: USER_END pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:43:27.870000 audit[1310]: CRED_DISP pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:43:27.888112 kernel: audit: type=1104 audit(1719909807.870:750): pid=1310 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 08:43:28.044882 sshd[1296]: pam_unix(sshd:session): session closed for user core Jul 2 08:43:28.044000 audit[1296]: USER_END pid=1296 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:43:28.058513 kernel: audit: type=1106 audit(1719909808.044:751): pid=1296 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:43:28.044000 audit[1296]: CRED_DISP pid=1296 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:43:28.058701 systemd[1]: sshd@6-172.24.4.178:22-172.24.4.1:40014.service: Deactivated successfully. Jul 2 08:43:28.060164 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 08:43:28.060416 systemd[1]: session-7.scope: Consumed 6.599s CPU time. Jul 2 08:43:28.063287 systemd-logind[1133]: Session 7 logged out. Waiting for processes to exit. Jul 2 08:43:28.063979 kernel: audit: type=1104 audit(1719909808.044:752): pid=1296 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:43:28.057000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.178:22-172.24.4.1:40014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:28.064353 systemd-logind[1133]: Removed session 7. Jul 2 08:43:28.068535 kernel: audit: type=1131 audit(1719909808.057:753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.178:22-172.24.4.1:40014 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:43:32.434000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=526931 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 08:43:32.434000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d327c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:32.449881 kernel: audit: type=1400 audit(1719909812.434:754): avc: denied { watch } for pid=1895 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=526931 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 08:43:32.449968 kernel: audit: type=1300 audit(1719909812.434:754): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d327c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:43:32.434000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:32.455074 kernel: audit: type=1327 audit(1719909812.434:754): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:43:33.581338 kubelet[2000]: I0702 08:43:33.581308 2000 kuberuntime_manager.go:1523] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 08:43:33.582543 env[1144]: time="2024-07-02T08:43:33.582416936Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 08:43:33.583823 kubelet[2000]: I0702 08:43:33.583781 2000 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 08:43:34.483947 kubelet[2000]: I0702 08:43:34.483872 2000 topology_manager.go:215] "Topology Admit Handler" podUID="12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb" podNamespace="kube-system" podName="kube-proxy-rgslr" Jul 2 08:43:34.487555 kubelet[2000]: W0702 08:43:34.487521 2000 reflector.go:547] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510-3-5-1-a8b80a6678.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-5-1-a8b80a6678.novalocal' and this object Jul 2 08:43:34.487680 kubelet[2000]: E0702 08:43:34.487573 2000 reflector.go:150] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510-3-5-1-a8b80a6678.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-5-1-a8b80a6678.novalocal' and this object Jul 2 08:43:34.487680 kubelet[2000]: W0702 08:43:34.487653 2000 reflector.go:547] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-5-1-a8b80a6678.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-5-1-a8b80a6678.novalocal' and this object Jul 2 08:43:34.487680 kubelet[2000]: E0702 08:43:34.487668 2000 reflector.go:150] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-5-1-a8b80a6678.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-5-1-a8b80a6678.novalocal' and this object Jul 2 08:43:34.490983 systemd[1]: Created slice kubepods-besteffort-pod12e4ecd5_f2b0_4e90_ac79_8b60ca5a05eb.slice. Jul 2 08:43:34.562726 kubelet[2000]: I0702 08:43:34.562630 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb-kube-proxy\") pod \"kube-proxy-rgslr\" (UID: \"12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb\") " pod="kube-system/kube-proxy-rgslr" Jul 2 08:43:34.563002 kubelet[2000]: I0702 08:43:34.562979 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7bggg\" (UniqueName: \"kubernetes.io/projected/12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb-kube-api-access-7bggg\") pod \"kube-proxy-rgslr\" (UID: \"12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb\") " pod="kube-system/kube-proxy-rgslr" Jul 2 08:43:34.563149 kubelet[2000]: I0702 08:43:34.563133 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb-xtables-lock\") pod \"kube-proxy-rgslr\" (UID: \"12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb\") " pod="kube-system/kube-proxy-rgslr" Jul 2 08:43:34.563280 kubelet[2000]: I0702 08:43:34.563264 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb-lib-modules\") pod \"kube-proxy-rgslr\" (UID: \"12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb\") " pod="kube-system/kube-proxy-rgslr" Jul 2 08:43:34.732291 kubelet[2000]: I0702 08:43:34.732239 2000 topology_manager.go:215] "Topology Admit Handler" podUID="f17afcc2-624c-4faa-a631-98099c4fba5b" podNamespace="tigera-operator" podName="tigera-operator-76ff79f7fd-wfgcq" Jul 2 08:43:34.737991 systemd[1]: Created slice kubepods-besteffort-podf17afcc2_624c_4faa_a631_98099c4fba5b.slice. Jul 2 08:43:34.764509 kubelet[2000]: I0702 08:43:34.764447 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f17afcc2-624c-4faa-a631-98099c4fba5b-var-lib-calico\") pod \"tigera-operator-76ff79f7fd-wfgcq\" (UID: \"f17afcc2-624c-4faa-a631-98099c4fba5b\") " pod="tigera-operator/tigera-operator-76ff79f7fd-wfgcq" Jul 2 08:43:34.764809 kubelet[2000]: I0702 08:43:34.764790 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h7p4l\" (UniqueName: \"kubernetes.io/projected/f17afcc2-624c-4faa-a631-98099c4fba5b-kube-api-access-h7p4l\") pod \"tigera-operator-76ff79f7fd-wfgcq\" (UID: \"f17afcc2-624c-4faa-a631-98099c4fba5b\") " pod="tigera-operator/tigera-operator-76ff79f7fd-wfgcq" Jul 2 08:43:35.042900 env[1144]: time="2024-07-02T08:43:35.042508765Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76ff79f7fd-wfgcq,Uid:f17afcc2-624c-4faa-a631-98099c4fba5b,Namespace:tigera-operator,Attempt:0,}" Jul 2 08:43:35.086521 env[1144]: time="2024-07-02T08:43:35.086354150Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:35.086920 env[1144]: time="2024-07-02T08:43:35.086822520Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:35.087198 env[1144]: time="2024-07-02T08:43:35.087107910Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:35.087841 env[1144]: time="2024-07-02T08:43:35.087775068Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/81300395f450ea575cb6ce29da0570a0017d191c29a505f815a5adce0a774459 pid=2086 runtime=io.containerd.runc.v2 Jul 2 08:43:35.119716 systemd[1]: run-containerd-runc-k8s.io-81300395f450ea575cb6ce29da0570a0017d191c29a505f815a5adce0a774459-runc.0pDLWf.mount: Deactivated successfully. Jul 2 08:43:35.122790 systemd[1]: Started cri-containerd-81300395f450ea575cb6ce29da0570a0017d191c29a505f815a5adce0a774459.scope. Jul 2 08:43:35.152411 kernel: audit: type=1400 audit(1719909815.143:755): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.152714 kernel: audit: type=1400 audit(1719909815.143:756): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.152779 kernel: audit: type=1400 audit(1719909815.143:757): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.159595 kernel: audit: type=1400 audit(1719909815.143:758): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.175893 kernel: audit: type=1400 audit(1719909815.143:759): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.175998 kernel: audit: type=1400 audit(1719909815.143:760): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.185527 kernel: audit: type=1400 audit(1719909815.143:761): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.185629 kernel: audit: type=1400 audit(1719909815.143:762): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.195501 kernel: audit: type=1400 audit(1719909815.143:763): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.200577 kernel: audit: type=1400 audit(1719909815.155:764): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.155000 audit: BPF prog-id=106 op=LOAD Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2086 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:35.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831333030333935663435306561353735636236636532396461303537 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2086 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:35.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831333030333935663435306561353735636236636532396461303537 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit: BPF prog-id=107 op=LOAD Jul 2 08:43:35.158000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000364430 items=0 ppid=2086 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:35.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831333030333935663435306561353735636236636532396461303537 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit: BPF prog-id=108 op=LOAD Jul 2 08:43:35.158000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000364478 items=0 ppid=2086 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:35.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831333030333935663435306561353735636236636532396461303537 Jul 2 08:43:35.158000 audit: BPF prog-id=108 op=UNLOAD Jul 2 08:43:35.158000 audit: BPF prog-id=107 op=UNLOAD Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { perfmon } for pid=2098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit[2098]: AVC avc: denied { bpf } for pid=2098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:35.158000 audit: BPF prog-id=109 op=LOAD Jul 2 08:43:35.158000 audit[2098]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000364888 items=0 ppid=2086 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:35.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831333030333935663435306561353735636236636532396461303537 Jul 2 08:43:35.210751 env[1144]: time="2024-07-02T08:43:35.210664648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76ff79f7fd-wfgcq,Uid:f17afcc2-624c-4faa-a631-98099c4fba5b,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"81300395f450ea575cb6ce29da0570a0017d191c29a505f815a5adce0a774459\"" Jul 2 08:43:35.215104 env[1144]: time="2024-07-02T08:43:35.214814383Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 08:43:35.665324 kubelet[2000]: E0702 08:43:35.665275 2000 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Jul 2 08:43:35.666651 kubelet[2000]: E0702 08:43:35.665450 2000 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb-kube-proxy podName:12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb nodeName:}" failed. No retries permitted until 2024-07-02 08:43:36.165373753 +0000 UTC m=+14.212783494 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb-kube-proxy") pod "kube-proxy-rgslr" (UID: "12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb") : failed to sync configmap cache: timed out waiting for the condition Jul 2 08:43:36.299954 env[1144]: time="2024-07-02T08:43:36.299826718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rgslr,Uid:12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb,Namespace:kube-system,Attempt:0,}" Jul 2 08:43:36.346211 env[1144]: time="2024-07-02T08:43:36.346061257Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:36.346572 env[1144]: time="2024-07-02T08:43:36.346159829Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:36.346572 env[1144]: time="2024-07-02T08:43:36.346193452Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:36.347167 env[1144]: time="2024-07-02T08:43:36.347009487Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d451c42d5fe5216f2e3924908ea930e6a1d358cfd0fe004569af8fdd109ded17 pid=2128 runtime=io.containerd.runc.v2 Jul 2 08:43:36.395243 systemd[1]: run-containerd-runc-k8s.io-d451c42d5fe5216f2e3924908ea930e6a1d358cfd0fe004569af8fdd109ded17-runc.cu3Dmm.mount: Deactivated successfully. Jul 2 08:43:36.406400 systemd[1]: Started cri-containerd-d451c42d5fe5216f2e3924908ea930e6a1d358cfd0fe004569af8fdd109ded17.scope. Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.416000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.417000 audit: BPF prog-id=110 op=LOAD Jul 2 08:43:36.419000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.419000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2128 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353163343264356665353231366632653339323439303865613933 Jul 2 08:43:36.419000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.419000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2128 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353163343264356665353231366632653339323439303865613933 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit: BPF prog-id=111 op=LOAD Jul 2 08:43:36.420000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00020b020 items=0 ppid=2128 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353163343264356665353231366632653339323439303865613933 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.420000 audit: BPF prog-id=112 op=LOAD Jul 2 08:43:36.420000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00020b068 items=0 ppid=2128 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.420000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353163343264356665353231366632653339323439303865613933 Jul 2 08:43:36.421000 audit: BPF prog-id=112 op=UNLOAD Jul 2 08:43:36.421000 audit: BPF prog-id=111 op=UNLOAD Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { perfmon } for pid=2138 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit[2138]: AVC avc: denied { bpf } for pid=2138 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.421000 audit: BPF prog-id=113 op=LOAD Jul 2 08:43:36.421000 audit[2138]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00020b478 items=0 ppid=2128 pid=2138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353163343264356665353231366632653339323439303865613933 Jul 2 08:43:36.438305 env[1144]: time="2024-07-02T08:43:36.438247909Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-rgslr,Uid:12e4ecd5-f2b0-4e90-ac79-8b60ca5a05eb,Namespace:kube-system,Attempt:0,} returns sandbox id \"d451c42d5fe5216f2e3924908ea930e6a1d358cfd0fe004569af8fdd109ded17\"" Jul 2 08:43:36.452724 env[1144]: time="2024-07-02T08:43:36.452681736Z" level=info msg="CreateContainer within sandbox \"d451c42d5fe5216f2e3924908ea930e6a1d358cfd0fe004569af8fdd109ded17\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 08:43:36.534202 env[1144]: time="2024-07-02T08:43:36.534090161Z" level=info msg="CreateContainer within sandbox \"d451c42d5fe5216f2e3924908ea930e6a1d358cfd0fe004569af8fdd109ded17\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e8bbc3de7916be43da266c72bd044c64ffbefd22c5eb98ca172bd83bf78cfeed\"" Jul 2 08:43:36.536523 env[1144]: time="2024-07-02T08:43:36.535343789Z" level=info msg="StartContainer for \"e8bbc3de7916be43da266c72bd044c64ffbefd22c5eb98ca172bd83bf78cfeed\"" Jul 2 08:43:36.566233 systemd[1]: Started cri-containerd-e8bbc3de7916be43da266c72bd044c64ffbefd22c5eb98ca172bd83bf78cfeed.scope. Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001496b0 a2=3c a3=7f143aa1ac28 items=0 ppid=2128 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538626263336465373931366265343364613236366337326264303434 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.589000 audit: BPF prog-id=114 op=LOAD Jul 2 08:43:36.589000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001499d8 a2=78 a3=c0001b7768 items=0 ppid=2128 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538626263336465373931366265343364613236366337326264303434 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit: BPF prog-id=115 op=LOAD Jul 2 08:43:36.590000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000149770 a2=78 a3=c0001b77b8 items=0 ppid=2128 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538626263336465373931366265343364613236366337326264303434 Jul 2 08:43:36.590000 audit: BPF prog-id=115 op=UNLOAD Jul 2 08:43:36.590000 audit: BPF prog-id=114 op=UNLOAD Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:36.590000 audit: BPF prog-id=116 op=LOAD Jul 2 08:43:36.590000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000149c30 a2=78 a3=c0001b7848 items=0 ppid=2128 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:36.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538626263336465373931366265343364613236366337326264303434 Jul 2 08:43:36.624478 env[1144]: time="2024-07-02T08:43:36.624413954Z" level=info msg="StartContainer for \"e8bbc3de7916be43da266c72bd044c64ffbefd22c5eb98ca172bd83bf78cfeed\" returns successfully" Jul 2 08:43:36.966006 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3639074400.mount: Deactivated successfully. Jul 2 08:43:37.588000 audit[2220]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.588000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe143017a0 a2=0 a3=7ffe1430178c items=0 ppid=2179 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 08:43:37.589000 audit[2221]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.589000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed5100660 a2=0 a3=7ffed510064c items=0 ppid=2179 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.589000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 08:43:37.591000 audit[2222]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.591000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe1e0aa90 a2=0 a3=7fffe1e0aa7c items=0 ppid=2179 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.591000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 08:43:37.592000 audit[2223]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.592000 audit[2223]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0a95ef50 a2=0 a3=7ffd0a95ef3c items=0 ppid=2179 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.592000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 08:43:37.593000 audit[2224]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.593000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2a0c3cf0 a2=0 a3=7ffc2a0c3cdc items=0 ppid=2179 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.593000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 08:43:37.596000 audit[2225]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.596000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd3588c40 a2=0 a3=7ffdd3588c2c items=0 ppid=2179 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.596000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 08:43:37.694000 audit[2226]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.694000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffce17b5750 a2=0 a3=7ffce17b573c items=0 ppid=2179 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.694000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 08:43:37.700000 audit[2228]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.700000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc75a66f90 a2=0 a3=7ffc75a66f7c items=0 ppid=2179 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.700000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 08:43:37.707000 audit[2231]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.707000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd7fb71600 a2=0 a3=7ffd7fb715ec items=0 ppid=2179 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.707000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 08:43:37.709000 audit[2232]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.709000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2a4e91d0 a2=0 a3=7ffd2a4e91bc items=0 ppid=2179 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.709000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 08:43:37.714000 audit[2234]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.714000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd13facd40 a2=0 a3=7ffd13facd2c items=0 ppid=2179 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.714000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 08:43:37.716000 audit[2235]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.716000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb659ca70 a2=0 a3=7ffdb659ca5c items=0 ppid=2179 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 08:43:37.719000 audit[2237]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.719000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffcb024060 a2=0 a3=7fffcb02404c items=0 ppid=2179 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.719000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 08:43:37.723000 audit[2240]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.723000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcff8ef6e0 a2=0 a3=7ffcff8ef6cc items=0 ppid=2179 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.723000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 08:43:37.724000 audit[2241]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.724000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff333eb160 a2=0 a3=7fff333eb14c items=0 ppid=2179 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.724000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 08:43:37.726000 audit[2243]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.726000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9c9e2960 a2=0 a3=7ffe9c9e294c items=0 ppid=2179 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 08:43:37.727000 audit[2244]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.727000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe14920c20 a2=0 a3=7ffe14920c0c items=0 ppid=2179 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.727000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 08:43:37.730000 audit[2246]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.730000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffbadc4e90 a2=0 a3=7fffbadc4e7c items=0 ppid=2179 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.730000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 08:43:37.733000 audit[2249]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.733000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd31164660 a2=0 a3=7ffd3116464c items=0 ppid=2179 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.733000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 08:43:37.737000 audit[2252]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.737000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd6d3bcfd0 a2=0 a3=7ffd6d3bcfbc items=0 ppid=2179 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 08:43:37.738000 audit[2253]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.738000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe537b4120 a2=0 a3=7ffe537b410c items=0 ppid=2179 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 08:43:37.741000 audit[2255]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.741000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe5019db00 a2=0 a3=7ffe5019daec items=0 ppid=2179 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.741000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:43:37.745000 audit[2258]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.745000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc29399590 a2=0 a3=7ffc2939957c items=0 ppid=2179 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.745000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:43:37.746000 audit[2259]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.746000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa8b3adc0 a2=0 a3=7fffa8b3adac items=0 ppid=2179 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 08:43:37.748000 audit[2261]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 08:43:37.748000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc3dcc1500 a2=0 a3=7ffc3dcc14ec items=0 ppid=2179 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 08:43:37.783000 audit[2267]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:37.783000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffc5f1e9b00 a2=0 a3=7ffc5f1e9aec items=0 ppid=2179 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.783000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:37.792000 audit[2267]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:37.792000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffc5f1e9b00 a2=0 a3=7ffc5f1e9aec items=0 ppid=2179 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.792000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:37.794000 audit[2272]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2272 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.794000 audit[2272]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffb177cdb0 a2=0 a3=7fffb177cd9c items=0 ppid=2179 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.794000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 08:43:37.799000 audit[2274]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.799000 audit[2274]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffce0405a60 a2=0 a3=7ffce0405a4c items=0 ppid=2179 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.799000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 08:43:37.803000 audit[2277]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.803000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff687626f0 a2=0 a3=7fff687626dc items=0 ppid=2179 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.803000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 08:43:37.804000 audit[2278]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2278 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.804000 audit[2278]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeec012b40 a2=0 a3=7ffeec012b2c items=0 ppid=2179 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.804000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 08:43:37.807000 audit[2280]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.807000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff44f9bd60 a2=0 a3=7fff44f9bd4c items=0 ppid=2179 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.807000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 08:43:37.808000 audit[2281]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2281 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.808000 audit[2281]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef50114a0 a2=0 a3=7ffef501148c items=0 ppid=2179 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.808000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 08:43:37.811000 audit[2283]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2283 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.811000 audit[2283]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc7c4cd120 a2=0 a3=7ffc7c4cd10c items=0 ppid=2179 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.811000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 08:43:37.814000 audit[2286]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.814000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff8233ee30 a2=0 a3=7fff8233ee1c items=0 ppid=2179 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.814000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 08:43:37.816000 audit[2287]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.816000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc05d92280 a2=0 a3=7ffc05d9226c items=0 ppid=2179 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 08:43:37.820000 audit[2289]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.820000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff44f37f90 a2=0 a3=7fff44f37f7c items=0 ppid=2179 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.820000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 08:43:37.822000 audit[2290]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.822000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc17469f90 a2=0 a3=7ffc17469f7c items=0 ppid=2179 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.822000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 08:43:37.825000 audit[2292]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2292 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.825000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffcf7c62e0 a2=0 a3=7fffcf7c62cc items=0 ppid=2179 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.825000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 08:43:37.828000 audit[2295]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.828000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcbbd89fe0 a2=0 a3=7ffcbbd89fcc items=0 ppid=2179 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 08:43:37.831000 audit[2298]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.831000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffddac1a4b0 a2=0 a3=7ffddac1a49c items=0 ppid=2179 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.831000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 08:43:37.833000 audit[2299]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.833000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffff13782b0 a2=0 a3=7ffff137829c items=0 ppid=2179 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 08:43:37.835000 audit[2301]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.835000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd008132c0 a2=0 a3=7ffd008132ac items=0 ppid=2179 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:43:37.838000 audit[2304]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.838000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff2cc7c4e0 a2=0 a3=7fff2cc7c4cc items=0 ppid=2179 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 08:43:37.839000 audit[2305]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.839000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde6befca0 a2=0 a3=7ffde6befc8c items=0 ppid=2179 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 08:43:37.842000 audit[2307]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.842000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffef75ebb20 a2=0 a3=7ffef75ebb0c items=0 ppid=2179 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 08:43:37.844000 audit[2308]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.844000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed558fa50 a2=0 a3=7ffed558fa3c items=0 ppid=2179 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 08:43:37.846000 audit[2310]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.846000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc1c4be6d0 a2=0 a3=7ffc1c4be6bc items=0 ppid=2179 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.846000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:43:37.850000 audit[2313]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 08:43:37.850000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdfc990a00 a2=0 a3=7ffdfc9909ec items=0 ppid=2179 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 08:43:37.853000 audit[2315]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 08:43:37.853000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7ffcb48c3650 a2=0 a3=7ffcb48c363c items=0 ppid=2179 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.853000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:37.854000 audit[2315]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 08:43:37.854000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffcb48c3650 a2=0 a3=7ffcb48c363c items=0 ppid=2179 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:37.854000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:38.300935 env[1144]: time="2024-07-02T08:43:38.300794501Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:38.305102 env[1144]: time="2024-07-02T08:43:38.305048234Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:38.310394 env[1144]: time="2024-07-02T08:43:38.307915322Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:38.310847 env[1144]: time="2024-07-02T08:43:38.310791986Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:38.311099 env[1144]: time="2024-07-02T08:43:38.311072196Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d\"" Jul 2 08:43:38.324550 env[1144]: time="2024-07-02T08:43:38.324019872Z" level=info msg="CreateContainer within sandbox \"81300395f450ea575cb6ce29da0570a0017d191c29a505f815a5adce0a774459\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 08:43:38.368836 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3538072017.mount: Deactivated successfully. Jul 2 08:43:38.383203 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3402000892.mount: Deactivated successfully. Jul 2 08:43:38.400857 env[1144]: time="2024-07-02T08:43:38.400819520Z" level=info msg="CreateContainer within sandbox \"81300395f450ea575cb6ce29da0570a0017d191c29a505f815a5adce0a774459\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"d800e42e0cecb12bfcd16ac9dfbe1d3049f753bd9380dd0324c590095e5d3a1a\"" Jul 2 08:43:38.402601 env[1144]: time="2024-07-02T08:43:38.402528154Z" level=info msg="StartContainer for \"d800e42e0cecb12bfcd16ac9dfbe1d3049f753bd9380dd0324c590095e5d3a1a\"" Jul 2 08:43:38.439453 systemd[1]: Started cri-containerd-d800e42e0cecb12bfcd16ac9dfbe1d3049f753bd9380dd0324c590095e5d3a1a.scope. Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.464000 audit: BPF prog-id=117 op=LOAD Jul 2 08:43:38.464000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.464000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2086 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:38.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303065343265306365636231326266636431366163396466626531 Jul 2 08:43:38.464000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.464000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2086 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:38.464000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303065343265306365636231326266636431366163396466626531 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.465000 audit: BPF prog-id=118 op=LOAD Jul 2 08:43:38.465000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0000dbed0 items=0 ppid=2086 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:38.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303065343265306365636231326266636431366163396466626531 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit: BPF prog-id=119 op=LOAD Jul 2 08:43:38.466000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0000dbf18 items=0 ppid=2086 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:38.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303065343265306365636231326266636431366163396466626531 Jul 2 08:43:38.466000 audit: BPF prog-id=119 op=UNLOAD Jul 2 08:43:38.466000 audit: BPF prog-id=118 op=UNLOAD Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { perfmon } for pid=2325 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit[2325]: AVC avc: denied { bpf } for pid=2325 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:38.466000 audit: BPF prog-id=120 op=LOAD Jul 2 08:43:38.466000 audit[2325]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003ac328 items=0 ppid=2086 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:38.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438303065343265306365636231326266636431366163396466626531 Jul 2 08:43:38.567116 env[1144]: time="2024-07-02T08:43:38.566954122Z" level=info msg="StartContainer for \"d800e42e0cecb12bfcd16ac9dfbe1d3049f753bd9380dd0324c590095e5d3a1a\" returns successfully" Jul 2 08:43:39.342292 kubelet[2000]: I0702 08:43:39.342194 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-rgslr" podStartSLOduration=5.342160382 podStartE2EDuration="5.342160382s" podCreationTimestamp="2024-07-02 08:43:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:43:37.332543274 +0000 UTC m=+15.379952975" watchObservedRunningTime="2024-07-02 08:43:39.342160382 +0000 UTC m=+17.389570153" Jul 2 08:43:41.677424 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 2 08:43:41.677569 kernel: audit: type=1325 audit(1719909821.671:866): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.671000 audit[2357]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.671000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd72aaf190 a2=0 a3=7ffd72aaf17c items=0 ppid=2179 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.688399 kernel: audit: type=1300 audit(1719909821.671:866): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffd72aaf190 a2=0 a3=7ffd72aaf17c items=0 ppid=2179 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.688509 kernel: audit: type=1327 audit(1719909821.671:866): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.684000 audit[2357]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.684000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd72aaf190 a2=0 a3=0 items=0 ppid=2179 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.698152 kernel: audit: type=1325 audit(1719909821.684:867): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.698267 kernel: audit: type=1300 audit(1719909821.684:867): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd72aaf190 a2=0 a3=0 items=0 ppid=2179 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.684000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.698000 audit[2359]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.704883 kernel: audit: type=1327 audit(1719909821.684:867): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.704935 kernel: audit: type=1325 audit(1719909821.698:868): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.698000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe95c89de0 a2=0 a3=7ffe95c89dcc items=0 ppid=2179 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.710348 kernel: audit: type=1300 audit(1719909821.698:868): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe95c89de0 a2=0 a3=7ffe95c89dcc items=0 ppid=2179 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.710525 kernel: audit: type=1327 audit(1719909821.698:868): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.698000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.698000 audit[2359]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.715805 kernel: audit: type=1325 audit(1719909821.698:869): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:41.698000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe95c89de0 a2=0 a3=0 items=0 ppid=2179 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:41.698000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:41.818328 kubelet[2000]: I0702 08:43:41.818228 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76ff79f7fd-wfgcq" podStartSLOduration=4.716586663 podStartE2EDuration="7.818206125s" podCreationTimestamp="2024-07-02 08:43:34 +0000 UTC" firstStartedPulling="2024-07-02 08:43:35.213246673 +0000 UTC m=+13.260656364" lastFinishedPulling="2024-07-02 08:43:38.314866085 +0000 UTC m=+16.362275826" observedRunningTime="2024-07-02 08:43:39.345627745 +0000 UTC m=+17.393037536" watchObservedRunningTime="2024-07-02 08:43:41.818206125 +0000 UTC m=+19.865615816" Jul 2 08:43:41.822201 kubelet[2000]: I0702 08:43:41.822149 2000 topology_manager.go:215] "Topology Admit Handler" podUID="2a48c547-eaba-4fbc-bc2b-564a6a3a1a47" podNamespace="calico-system" podName="calico-typha-7959fc6ff8-svf8w" Jul 2 08:43:41.829123 systemd[1]: Created slice kubepods-besteffort-pod2a48c547_eaba_4fbc_bc2b_564a6a3a1a47.slice. Jul 2 08:43:41.914777 kubelet[2000]: I0702 08:43:41.914724 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2a48c547-eaba-4fbc-bc2b-564a6a3a1a47-tigera-ca-bundle\") pod \"calico-typha-7959fc6ff8-svf8w\" (UID: \"2a48c547-eaba-4fbc-bc2b-564a6a3a1a47\") " pod="calico-system/calico-typha-7959fc6ff8-svf8w" Jul 2 08:43:41.914777 kubelet[2000]: I0702 08:43:41.914775 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/2a48c547-eaba-4fbc-bc2b-564a6a3a1a47-typha-certs\") pod \"calico-typha-7959fc6ff8-svf8w\" (UID: \"2a48c547-eaba-4fbc-bc2b-564a6a3a1a47\") " pod="calico-system/calico-typha-7959fc6ff8-svf8w" Jul 2 08:43:41.915040 kubelet[2000]: I0702 08:43:41.914798 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tnj2d\" (UniqueName: \"kubernetes.io/projected/2a48c547-eaba-4fbc-bc2b-564a6a3a1a47-kube-api-access-tnj2d\") pod \"calico-typha-7959fc6ff8-svf8w\" (UID: \"2a48c547-eaba-4fbc-bc2b-564a6a3a1a47\") " pod="calico-system/calico-typha-7959fc6ff8-svf8w" Jul 2 08:43:41.930607 kubelet[2000]: I0702 08:43:41.930449 2000 topology_manager.go:215] "Topology Admit Handler" podUID="a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089" podNamespace="calico-system" podName="calico-node-nwg27" Jul 2 08:43:41.937421 systemd[1]: Created slice kubepods-besteffort-poda2d65e3b_d7c4_4bd3_b8f6_0d4ab0e73089.slice. Jul 2 08:43:42.015201 kubelet[2000]: I0702 08:43:42.015167 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-policysync\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.015453 kubelet[2000]: I0702 08:43:42.015432 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-tigera-ca-bundle\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.015623 kubelet[2000]: I0702 08:43:42.015606 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-xtables-lock\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.015711 kubelet[2000]: I0702 08:43:42.015698 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-cni-bin-dir\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.015790 kubelet[2000]: I0702 08:43:42.015777 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-cni-log-dir\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.015893 kubelet[2000]: I0702 08:43:42.015875 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kf48g\" (UniqueName: \"kubernetes.io/projected/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-kube-api-access-kf48g\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.015988 kubelet[2000]: I0702 08:43:42.015974 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-cni-net-dir\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.016078 kubelet[2000]: I0702 08:43:42.016065 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-node-certs\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.016154 kubelet[2000]: I0702 08:43:42.016141 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-var-run-calico\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.016235 kubelet[2000]: I0702 08:43:42.016222 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-flexvol-driver-host\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.016332 kubelet[2000]: I0702 08:43:42.016318 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-lib-modules\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.016407 kubelet[2000]: I0702 08:43:42.016394 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089-var-lib-calico\") pod \"calico-node-nwg27\" (UID: \"a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089\") " pod="calico-system/calico-node-nwg27" Jul 2 08:43:42.087600 kubelet[2000]: I0702 08:43:42.087543 2000 topology_manager.go:215] "Topology Admit Handler" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" podNamespace="calico-system" podName="csi-node-driver-sn5vm" Jul 2 08:43:42.087886 kubelet[2000]: E0702 08:43:42.087813 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:42.117065 kubelet[2000]: I0702 08:43:42.117012 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/2aad6adf-392f-4668-97c8-f175bdff4c5b-varrun\") pod \"csi-node-driver-sn5vm\" (UID: \"2aad6adf-392f-4668-97c8-f175bdff4c5b\") " pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:43:42.117277 kubelet[2000]: I0702 08:43:42.117058 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/2aad6adf-392f-4668-97c8-f175bdff4c5b-kubelet-dir\") pod \"csi-node-driver-sn5vm\" (UID: \"2aad6adf-392f-4668-97c8-f175bdff4c5b\") " pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:43:42.117277 kubelet[2000]: I0702 08:43:42.117124 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-25k75\" (UniqueName: \"kubernetes.io/projected/2aad6adf-392f-4668-97c8-f175bdff4c5b-kube-api-access-25k75\") pod \"csi-node-driver-sn5vm\" (UID: \"2aad6adf-392f-4668-97c8-f175bdff4c5b\") " pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:43:42.117277 kubelet[2000]: I0702 08:43:42.117168 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/2aad6adf-392f-4668-97c8-f175bdff4c5b-socket-dir\") pod \"csi-node-driver-sn5vm\" (UID: \"2aad6adf-392f-4668-97c8-f175bdff4c5b\") " pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:43:42.117277 kubelet[2000]: I0702 08:43:42.117234 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/2aad6adf-392f-4668-97c8-f175bdff4c5b-registration-dir\") pod \"csi-node-driver-sn5vm\" (UID: \"2aad6adf-392f-4668-97c8-f175bdff4c5b\") " pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:43:42.132954 kubelet[2000]: E0702 08:43:42.132900 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.132954 kubelet[2000]: W0702 08:43:42.132929 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.132954 kubelet[2000]: E0702 08:43:42.132952 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.135457 kubelet[2000]: E0702 08:43:42.135421 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.135457 kubelet[2000]: W0702 08:43:42.135443 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.135617 kubelet[2000]: E0702 08:43:42.135481 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.135830 kubelet[2000]: E0702 08:43:42.135807 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.135830 kubelet[2000]: W0702 08:43:42.135823 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.135916 kubelet[2000]: E0702 08:43:42.135834 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.136032 kubelet[2000]: E0702 08:43:42.136009 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.136032 kubelet[2000]: W0702 08:43:42.136025 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.136108 kubelet[2000]: E0702 08:43:42.136034 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.136215 kubelet[2000]: E0702 08:43:42.136195 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.136215 kubelet[2000]: W0702 08:43:42.136209 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.136292 kubelet[2000]: E0702 08:43:42.136219 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.136361 kubelet[2000]: E0702 08:43:42.136339 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.136361 kubelet[2000]: W0702 08:43:42.136353 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.136433 kubelet[2000]: E0702 08:43:42.136362 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.136558 kubelet[2000]: E0702 08:43:42.136537 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.136558 kubelet[2000]: W0702 08:43:42.136552 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.136558 kubelet[2000]: E0702 08:43:42.136562 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.136729 kubelet[2000]: E0702 08:43:42.136708 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.136729 kubelet[2000]: W0702 08:43:42.136726 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.136795 kubelet[2000]: E0702 08:43:42.136736 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.136883 kubelet[2000]: E0702 08:43:42.136862 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.136883 kubelet[2000]: W0702 08:43:42.136878 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.136952 kubelet[2000]: E0702 08:43:42.136890 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.137031 kubelet[2000]: E0702 08:43:42.137010 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.137031 kubelet[2000]: W0702 08:43:42.137025 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.137101 kubelet[2000]: E0702 08:43:42.137034 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.137210 kubelet[2000]: E0702 08:43:42.137187 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.137210 kubelet[2000]: W0702 08:43:42.137203 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.137300 kubelet[2000]: E0702 08:43:42.137216 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.138955 env[1144]: time="2024-07-02T08:43:42.137900379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7959fc6ff8-svf8w,Uid:2a48c547-eaba-4fbc-bc2b-564a6a3a1a47,Namespace:calico-system,Attempt:0,}" Jul 2 08:43:42.152756 kubelet[2000]: E0702 08:43:42.151665 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.152756 kubelet[2000]: W0702 08:43:42.151688 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.152756 kubelet[2000]: E0702 08:43:42.151707 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.177306 env[1144]: time="2024-07-02T08:43:42.177184108Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:42.177306 env[1144]: time="2024-07-02T08:43:42.177238099Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:42.177667 env[1144]: time="2024-07-02T08:43:42.177253077Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:42.177920 env[1144]: time="2024-07-02T08:43:42.177851028Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/48379f7836079ee74db269f23059711b06a2ebbd6b3a219dd8b9baa254666850 pid=2383 runtime=io.containerd.runc.v2 Jul 2 08:43:42.205790 systemd[1]: Started cri-containerd-48379f7836079ee74db269f23059711b06a2ebbd6b3a219dd8b9baa254666850.scope. Jul 2 08:43:42.219889 kubelet[2000]: E0702 08:43:42.219850 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.219889 kubelet[2000]: W0702 08:43:42.219872 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.219889 kubelet[2000]: E0702 08:43:42.219890 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.220156 kubelet[2000]: E0702 08:43:42.220115 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.220156 kubelet[2000]: W0702 08:43:42.220125 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.220156 kubelet[2000]: E0702 08:43:42.220135 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.220342 kubelet[2000]: E0702 08:43:42.220317 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.220342 kubelet[2000]: W0702 08:43:42.220332 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.220342 kubelet[2000]: E0702 08:43:42.220342 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.223529 kubelet[2000]: E0702 08:43:42.223505 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.223529 kubelet[2000]: W0702 08:43:42.223521 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.223658 kubelet[2000]: E0702 08:43:42.223532 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.224867 kubelet[2000]: E0702 08:43:42.224844 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.224867 kubelet[2000]: W0702 08:43:42.224860 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.224966 kubelet[2000]: E0702 08:43:42.224875 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.225087 kubelet[2000]: E0702 08:43:42.225063 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.225087 kubelet[2000]: W0702 08:43:42.225092 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.225170 kubelet[2000]: E0702 08:43:42.225106 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.225581 kubelet[2000]: E0702 08:43:42.225554 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.225581 kubelet[2000]: W0702 08:43:42.225571 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.225675 kubelet[2000]: E0702 08:43:42.225585 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.225803 kubelet[2000]: E0702 08:43:42.225769 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.225803 kubelet[2000]: W0702 08:43:42.225784 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.225881 kubelet[2000]: E0702 08:43:42.225859 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.226047 kubelet[2000]: E0702 08:43:42.226024 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.226047 kubelet[2000]: W0702 08:43:42.226042 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.226245 kubelet[2000]: E0702 08:43:42.226169 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.226245 kubelet[2000]: W0702 08:43:42.226185 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.226406 kubelet[2000]: E0702 08:43:42.226384 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.226406 kubelet[2000]: E0702 08:43:42.226405 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.226632 kubelet[2000]: E0702 08:43:42.226512 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.226632 kubelet[2000]: W0702 08:43:42.226521 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.226632 kubelet[2000]: E0702 08:43:42.226597 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.226727 kubelet[2000]: E0702 08:43:42.226700 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.226727 kubelet[2000]: W0702 08:43:42.226708 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227040 kubelet[2000]: E0702 08:43:42.226789 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227040 kubelet[2000]: E0702 08:43:42.226885 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227040 kubelet[2000]: W0702 08:43:42.226893 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227040 kubelet[2000]: E0702 08:43:42.226904 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227040 kubelet[2000]: E0702 08:43:42.227038 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227188 kubelet[2000]: W0702 08:43:42.227047 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227188 kubelet[2000]: E0702 08:43:42.227061 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227242 kubelet[2000]: E0702 08:43:42.227199 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227242 kubelet[2000]: W0702 08:43:42.227208 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227242 kubelet[2000]: E0702 08:43:42.227216 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227396 kubelet[2000]: E0702 08:43:42.227374 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227396 kubelet[2000]: W0702 08:43:42.227390 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227396 kubelet[2000]: E0702 08:43:42.227403 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227620 kubelet[2000]: E0702 08:43:42.227555 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227620 kubelet[2000]: W0702 08:43:42.227570 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227620 kubelet[2000]: E0702 08:43:42.227582 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227746 kubelet[2000]: E0702 08:43:42.227726 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227746 kubelet[2000]: W0702 08:43:42.227739 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.227822 kubelet[2000]: E0702 08:43:42.227749 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.227946 kubelet[2000]: E0702 08:43:42.227901 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.227946 kubelet[2000]: W0702 08:43:42.227915 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.228023 kubelet[2000]: E0702 08:43:42.227988 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.228152 kubelet[2000]: E0702 08:43:42.228079 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.228152 kubelet[2000]: W0702 08:43:42.228093 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.228239 kubelet[2000]: E0702 08:43:42.228170 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.228272 kubelet[2000]: E0702 08:43:42.228254 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.228272 kubelet[2000]: W0702 08:43:42.228263 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.228329 kubelet[2000]: E0702 08:43:42.228275 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.228649 kubelet[2000]: E0702 08:43:42.228426 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.228649 kubelet[2000]: W0702 08:43:42.228439 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.228649 kubelet[2000]: E0702 08:43:42.228448 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.228753 kubelet[2000]: E0702 08:43:42.228693 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.228753 kubelet[2000]: W0702 08:43:42.228704 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.228753 kubelet[2000]: E0702 08:43:42.228715 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.229346 kubelet[2000]: E0702 08:43:42.228930 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.229346 kubelet[2000]: W0702 08:43:42.228946 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.229346 kubelet[2000]: E0702 08:43:42.228955 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.229346 kubelet[2000]: E0702 08:43:42.229110 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.229346 kubelet[2000]: W0702 08:43:42.229120 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.229346 kubelet[2000]: E0702 08:43:42.229130 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.240404 env[1144]: time="2024-07-02T08:43:42.240353802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-nwg27,Uid:a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089,Namespace:calico-system,Attempt:0,}" Jul 2 08:43:42.242492 kubelet[2000]: E0702 08:43:42.242333 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:42.242492 kubelet[2000]: W0702 08:43:42.242368 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:42.242492 kubelet[2000]: E0702 08:43:42.242387 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.250000 audit: BPF prog-id=121 op=LOAD Jul 2 08:43:42.251000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.251000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2383 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438333739663738333630373965653734646232363966323330353937 Jul 2 08:43:42.251000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.251000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2383 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.251000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438333739663738333630373965653734646232363966323330353937 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.252000 audit: BPF prog-id=122 op=LOAD Jul 2 08:43:42.252000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00031deb0 items=0 ppid=2383 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438333739663738333630373965653734646232363966323330353937 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.256000 audit: BPF prog-id=123 op=LOAD Jul 2 08:43:42.256000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00031def8 items=0 ppid=2383 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438333739663738333630373965653734646232363966323330353937 Jul 2 08:43:42.262000 audit: BPF prog-id=123 op=UNLOAD Jul 2 08:43:42.262000 audit: BPF prog-id=122 op=UNLOAD Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { perfmon } for pid=2393 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit[2393]: AVC avc: denied { bpf } for pid=2393 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.262000 audit: BPF prog-id=124 op=LOAD Jul 2 08:43:42.262000 audit[2393]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000388308 items=0 ppid=2383 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.262000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438333739663738333630373965653734646232363966323330353937 Jul 2 08:43:42.268803 env[1144]: time="2024-07-02T08:43:42.268042967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:43:42.268803 env[1144]: time="2024-07-02T08:43:42.268121223Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:43:42.268803 env[1144]: time="2024-07-02T08:43:42.268157690Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:43:42.268803 env[1144]: time="2024-07-02T08:43:42.268285478Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb pid=2444 runtime=io.containerd.runc.v2 Jul 2 08:43:42.293083 systemd[1]: Started cri-containerd-c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb.scope. Jul 2 08:43:42.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.335000 audit: BPF prog-id=125 op=LOAD Jul 2 08:43:42.336000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.336000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2444 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623732396431366362666563373739346430303130656365636230 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2444 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623732396431366362666563373739346430303130656365636230 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.337000 audit: BPF prog-id=126 op=LOAD Jul 2 08:43:42.337000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00030fbe0 items=0 ppid=2444 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.337000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623732396431366362666563373739346430303130656365636230 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.339000 audit: BPF prog-id=127 op=LOAD Jul 2 08:43:42.339000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00030fc28 items=0 ppid=2444 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623732396431366362666563373739346430303130656365636230 Jul 2 08:43:42.341000 audit: BPF prog-id=127 op=UNLOAD Jul 2 08:43:42.342000 audit: BPF prog-id=126 op=UNLOAD Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:42.342000 audit: BPF prog-id=128 op=LOAD Jul 2 08:43:42.342000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000412038 items=0 ppid=2444 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334623732396431366362666563373739346430303130656365636230 Jul 2 08:43:42.349347 env[1144]: time="2024-07-02T08:43:42.349253570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7959fc6ff8-svf8w,Uid:2a48c547-eaba-4fbc-bc2b-564a6a3a1a47,Namespace:calico-system,Attempt:0,} returns sandbox id \"48379f7836079ee74db269f23059711b06a2ebbd6b3a219dd8b9baa254666850\"" Jul 2 08:43:42.354180 env[1144]: time="2024-07-02T08:43:42.354134614Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 08:43:42.383155 env[1144]: time="2024-07-02T08:43:42.383105812Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-nwg27,Uid:a2d65e3b-d7c4-4bd3-b8f6-0d4ab0e73089,Namespace:calico-system,Attempt:0,} returns sandbox id \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\"" Jul 2 08:43:42.728000 audit[2484]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:42.728000 audit[2484]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffd027d2b0 a2=0 a3=7fffd027d29c items=0 ppid=2179 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.728000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:42.729000 audit[2484]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:42.729000 audit[2484]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffd027d2b0 a2=0 a3=0 items=0 ppid=2179 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:42.729000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:44.218496 kubelet[2000]: E0702 08:43:44.217949 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:45.663964 env[1144]: time="2024-07-02T08:43:45.663898213Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:45.666550 env[1144]: time="2024-07-02T08:43:45.666509880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:45.668711 env[1144]: time="2024-07-02T08:43:45.668652955Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:45.670517 env[1144]: time="2024-07-02T08:43:45.670494490Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:45.671192 env[1144]: time="2024-07-02T08:43:45.671168163Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc\"" Jul 2 08:43:45.676040 env[1144]: time="2024-07-02T08:43:45.675994128Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 08:43:45.700205 env[1144]: time="2024-07-02T08:43:45.700165539Z" level=info msg="CreateContainer within sandbox \"48379f7836079ee74db269f23059711b06a2ebbd6b3a219dd8b9baa254666850\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 08:43:45.734077 env[1144]: time="2024-07-02T08:43:45.734031519Z" level=info msg="CreateContainer within sandbox \"48379f7836079ee74db269f23059711b06a2ebbd6b3a219dd8b9baa254666850\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"10b8d0269b1287fb8228cbc95fc351434afed3fcb4c5dc6b38cf85a746bec040\"" Jul 2 08:43:45.735149 env[1144]: time="2024-07-02T08:43:45.735122819Z" level=info msg="StartContainer for \"10b8d0269b1287fb8228cbc95fc351434afed3fcb4c5dc6b38cf85a746bec040\"" Jul 2 08:43:45.768475 systemd[1]: Started cri-containerd-10b8d0269b1287fb8228cbc95fc351434afed3fcb4c5dc6b38cf85a746bec040.scope. Jul 2 08:43:45.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.784000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.784000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.785000 audit: BPF prog-id=129 op=LOAD Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2383 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:45.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623864303236396231323837666238323238636263393566633335 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2383 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:45.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623864303236396231323837666238323238636263393566633335 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.786000 audit: BPF prog-id=130 op=LOAD Jul 2 08:43:45.786000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000383dc0 items=0 ppid=2383 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:45.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623864303236396231323837666238323238636263393566633335 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.787000 audit: BPF prog-id=131 op=LOAD Jul 2 08:43:45.787000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000383e08 items=0 ppid=2383 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:45.787000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623864303236396231323837666238323238636263393566633335 Jul 2 08:43:45.788000 audit: BPF prog-id=131 op=UNLOAD Jul 2 08:43:45.788000 audit: BPF prog-id=130 op=UNLOAD Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:45.788000 audit: BPF prog-id=132 op=LOAD Jul 2 08:43:45.788000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ee218 items=0 ppid=2383 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:45.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130623864303236396231323837666238323238636263393566633335 Jul 2 08:43:45.839279 env[1144]: time="2024-07-02T08:43:45.839215789Z" level=info msg="StartContainer for \"10b8d0269b1287fb8228cbc95fc351434afed3fcb4c5dc6b38cf85a746bec040\" returns successfully" Jul 2 08:43:46.218391 kubelet[2000]: E0702 08:43:46.217844 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:46.442669 kubelet[2000]: E0702 08:43:46.442597 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.442669 kubelet[2000]: W0702 08:43:46.442645 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.442669 kubelet[2000]: E0702 08:43:46.442681 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.443130 kubelet[2000]: E0702 08:43:46.443032 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.443130 kubelet[2000]: W0702 08:43:46.443054 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.443130 kubelet[2000]: E0702 08:43:46.443076 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.443415 kubelet[2000]: E0702 08:43:46.443368 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.443415 kubelet[2000]: W0702 08:43:46.443404 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.443655 kubelet[2000]: E0702 08:43:46.443428 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.443817 kubelet[2000]: E0702 08:43:46.443772 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.443817 kubelet[2000]: W0702 08:43:46.443808 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.443817 kubelet[2000]: E0702 08:43:46.443830 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.444220 kubelet[2000]: E0702 08:43:46.444152 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.444220 kubelet[2000]: W0702 08:43:46.444186 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.444220 kubelet[2000]: E0702 08:43:46.444208 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.444641 kubelet[2000]: E0702 08:43:46.444580 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.444641 kubelet[2000]: W0702 08:43:46.444614 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.444641 kubelet[2000]: E0702 08:43:46.444635 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.445028 kubelet[2000]: E0702 08:43:46.444965 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.445028 kubelet[2000]: W0702 08:43:46.445000 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.445028 kubelet[2000]: E0702 08:43:46.445020 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.445435 kubelet[2000]: E0702 08:43:46.445384 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.445435 kubelet[2000]: W0702 08:43:46.445418 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.445667 kubelet[2000]: E0702 08:43:46.445439 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.445889 kubelet[2000]: E0702 08:43:46.445823 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.445889 kubelet[2000]: W0702 08:43:46.445859 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.445889 kubelet[2000]: E0702 08:43:46.445881 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.446244 kubelet[2000]: E0702 08:43:46.446172 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.446244 kubelet[2000]: W0702 08:43:46.446210 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.446244 kubelet[2000]: E0702 08:43:46.446232 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.446742 kubelet[2000]: E0702 08:43:46.446698 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.446742 kubelet[2000]: W0702 08:43:46.446734 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.446948 kubelet[2000]: E0702 08:43:46.446757 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.447152 kubelet[2000]: E0702 08:43:46.447083 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.447152 kubelet[2000]: W0702 08:43:46.447117 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.447152 kubelet[2000]: E0702 08:43:46.447138 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.447562 kubelet[2000]: E0702 08:43:46.447456 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.447562 kubelet[2000]: W0702 08:43:46.447547 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.447745 kubelet[2000]: E0702 08:43:46.447569 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.447994 kubelet[2000]: E0702 08:43:46.447908 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.447994 kubelet[2000]: W0702 08:43:46.447942 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.447994 kubelet[2000]: E0702 08:43:46.447963 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.448315 kubelet[2000]: E0702 08:43:46.448267 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.448315 kubelet[2000]: W0702 08:43:46.448301 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.448533 kubelet[2000]: E0702 08:43:46.448324 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.458713 kubelet[2000]: E0702 08:43:46.458645 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.459059 kubelet[2000]: W0702 08:43:46.459024 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.459319 kubelet[2000]: E0702 08:43:46.459274 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.460020 kubelet[2000]: E0702 08:43:46.459992 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.460206 kubelet[2000]: W0702 08:43:46.460176 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.460400 kubelet[2000]: E0702 08:43:46.460370 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.460987 kubelet[2000]: E0702 08:43:46.460961 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.461169 kubelet[2000]: W0702 08:43:46.461141 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.461618 kubelet[2000]: E0702 08:43:46.461547 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.461909 kubelet[2000]: E0702 08:43:46.461882 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.462075 kubelet[2000]: W0702 08:43:46.462048 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.462579 kubelet[2000]: E0702 08:43:46.462552 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.462759 kubelet[2000]: W0702 08:43:46.462731 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.462921 kubelet[2000]: E0702 08:43:46.462893 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.463366 kubelet[2000]: E0702 08:43:46.463340 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.463591 kubelet[2000]: W0702 08:43:46.463562 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.463767 kubelet[2000]: E0702 08:43:46.463738 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.464186 kubelet[2000]: E0702 08:43:46.464161 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.464354 kubelet[2000]: W0702 08:43:46.464327 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.464578 kubelet[2000]: E0702 08:43:46.464548 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.465080 kubelet[2000]: E0702 08:43:46.465055 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.465283 kubelet[2000]: W0702 08:43:46.465254 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.465443 kubelet[2000]: E0702 08:43:46.465416 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.466228 kubelet[2000]: E0702 08:43:46.466202 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.466414 kubelet[2000]: W0702 08:43:46.466386 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.466667 kubelet[2000]: E0702 08:43:46.466638 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.467185 kubelet[2000]: E0702 08:43:46.467117 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.467376 kubelet[2000]: W0702 08:43:46.467348 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.467585 kubelet[2000]: E0702 08:43:46.467556 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.468019 kubelet[2000]: E0702 08:43:46.467994 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.468187 kubelet[2000]: W0702 08:43:46.468160 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.480450 kubelet[2000]: E0702 08:43:46.468373 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.480867 kubelet[2000]: E0702 08:43:46.468769 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.481610 kubelet[2000]: E0702 08:43:46.481549 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.481748 kubelet[2000]: W0702 08:43:46.481600 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.481748 kubelet[2000]: E0702 08:43:46.481686 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.483739 kubelet[2000]: E0702 08:43:46.483702 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.483979 kubelet[2000]: W0702 08:43:46.483944 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.484213 kubelet[2000]: E0702 08:43:46.484179 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.485147 kubelet[2000]: E0702 08:43:46.485040 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.485147 kubelet[2000]: W0702 08:43:46.485079 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.485147 kubelet[2000]: E0702 08:43:46.485123 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.485634 kubelet[2000]: E0702 08:43:46.485538 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.485634 kubelet[2000]: W0702 08:43:46.485571 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.485634 kubelet[2000]: E0702 08:43:46.485609 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.486516 kubelet[2000]: E0702 08:43:46.485957 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.486516 kubelet[2000]: W0702 08:43:46.485992 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.486516 kubelet[2000]: E0702 08:43:46.486027 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.486959 kubelet[2000]: E0702 08:43:46.486918 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.486959 kubelet[2000]: W0702 08:43:46.486953 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.487154 kubelet[2000]: E0702 08:43:46.486976 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:46.487544 kubelet[2000]: E0702 08:43:46.487360 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:46.487544 kubelet[2000]: W0702 08:43:46.487396 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:46.487544 kubelet[2000]: E0702 08:43:46.487419 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.346727 kubelet[2000]: I0702 08:43:47.346697 2000 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 08:43:47.355134 kubelet[2000]: E0702 08:43:47.355100 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.355134 kubelet[2000]: W0702 08:43:47.355124 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.355312 kubelet[2000]: E0702 08:43:47.355145 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.355344 kubelet[2000]: E0702 08:43:47.355317 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.355344 kubelet[2000]: W0702 08:43:47.355328 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.355396 kubelet[2000]: E0702 08:43:47.355352 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.355529 kubelet[2000]: E0702 08:43:47.355513 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.355529 kubelet[2000]: W0702 08:43:47.355528 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.355634 kubelet[2000]: E0702 08:43:47.355539 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.355743 kubelet[2000]: E0702 08:43:47.355727 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.355743 kubelet[2000]: W0702 08:43:47.355741 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.355836 kubelet[2000]: E0702 08:43:47.355751 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.355943 kubelet[2000]: E0702 08:43:47.355926 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.355943 kubelet[2000]: W0702 08:43:47.355941 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.356032 kubelet[2000]: E0702 08:43:47.355951 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.356118 kubelet[2000]: E0702 08:43:47.356102 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.356118 kubelet[2000]: W0702 08:43:47.356117 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.356213 kubelet[2000]: E0702 08:43:47.356126 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.356288 kubelet[2000]: E0702 08:43:47.356259 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.356288 kubelet[2000]: W0702 08:43:47.356285 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.356380 kubelet[2000]: E0702 08:43:47.356295 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.356477 kubelet[2000]: E0702 08:43:47.356444 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.356477 kubelet[2000]: W0702 08:43:47.356467 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.356477 kubelet[2000]: E0702 08:43:47.356476 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.356663 kubelet[2000]: E0702 08:43:47.356647 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.356663 kubelet[2000]: W0702 08:43:47.356661 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.356763 kubelet[2000]: E0702 08:43:47.356670 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.356830 kubelet[2000]: E0702 08:43:47.356801 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.356830 kubelet[2000]: W0702 08:43:47.356827 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.356920 kubelet[2000]: E0702 08:43:47.356836 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.356996 kubelet[2000]: E0702 08:43:47.356980 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.356996 kubelet[2000]: W0702 08:43:47.356994 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.357096 kubelet[2000]: E0702 08:43:47.357003 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.357167 kubelet[2000]: E0702 08:43:47.357138 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.357167 kubelet[2000]: W0702 08:43:47.357164 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.357270 kubelet[2000]: E0702 08:43:47.357174 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.357359 kubelet[2000]: E0702 08:43:47.357342 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.357359 kubelet[2000]: W0702 08:43:47.357356 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.357456 kubelet[2000]: E0702 08:43:47.357367 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.357564 kubelet[2000]: E0702 08:43:47.357550 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.357627 kubelet[2000]: W0702 08:43:47.357563 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.357627 kubelet[2000]: E0702 08:43:47.357584 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.357751 kubelet[2000]: E0702 08:43:47.357737 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.357751 kubelet[2000]: W0702 08:43:47.357750 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.357840 kubelet[2000]: E0702 08:43:47.357759 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.367712 kubelet[2000]: E0702 08:43:47.367684 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.367933 kubelet[2000]: W0702 08:43:47.367916 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.368020 kubelet[2000]: E0702 08:43:47.368005 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.368247 kubelet[2000]: E0702 08:43:47.368236 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.368335 kubelet[2000]: W0702 08:43:47.368323 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.368405 kubelet[2000]: E0702 08:43:47.368393 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.368649 kubelet[2000]: E0702 08:43:47.368638 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.368728 kubelet[2000]: W0702 08:43:47.368717 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.368790 kubelet[2000]: E0702 08:43:47.368779 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.369013 kubelet[2000]: E0702 08:43:47.369002 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.369091 kubelet[2000]: W0702 08:43:47.369080 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.369156 kubelet[2000]: E0702 08:43:47.369145 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.369409 kubelet[2000]: E0702 08:43:47.369398 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.369504 kubelet[2000]: W0702 08:43:47.369492 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.369599 kubelet[2000]: E0702 08:43:47.369564 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.370567 kubelet[2000]: E0702 08:43:47.370554 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.370672 kubelet[2000]: W0702 08:43:47.370659 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.370760 kubelet[2000]: E0702 08:43:47.370747 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.372783 kubelet[2000]: E0702 08:43:47.372768 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.372887 kubelet[2000]: W0702 08:43:47.372874 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.372951 kubelet[2000]: E0702 08:43:47.372940 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.373480 kubelet[2000]: E0702 08:43:47.373453 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.373566 kubelet[2000]: W0702 08:43:47.373554 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.373632 kubelet[2000]: E0702 08:43:47.373621 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.373923 kubelet[2000]: E0702 08:43:47.373911 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.373999 kubelet[2000]: W0702 08:43:47.373988 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.374058 kubelet[2000]: E0702 08:43:47.374048 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.375213 kubelet[2000]: E0702 08:43:47.375196 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.375369 kubelet[2000]: W0702 08:43:47.375352 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.375500 kubelet[2000]: E0702 08:43:47.375486 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.376042 kubelet[2000]: E0702 08:43:47.376031 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.376114 kubelet[2000]: W0702 08:43:47.376103 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.376242 kubelet[2000]: E0702 08:43:47.376205 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.376493 kubelet[2000]: E0702 08:43:47.376449 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.376575 kubelet[2000]: W0702 08:43:47.376563 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.376651 kubelet[2000]: E0702 08:43:47.376640 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.376982 kubelet[2000]: E0702 08:43:47.376972 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.377062 kubelet[2000]: W0702 08:43:47.377051 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.377143 kubelet[2000]: E0702 08:43:47.377130 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.377613 kubelet[2000]: E0702 08:43:47.377590 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.377613 kubelet[2000]: W0702 08:43:47.377610 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.377733 kubelet[2000]: E0702 08:43:47.377634 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.377958 kubelet[2000]: E0702 08:43:47.377926 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.377958 kubelet[2000]: W0702 08:43:47.377954 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.378069 kubelet[2000]: E0702 08:43:47.377972 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.378272 kubelet[2000]: E0702 08:43:47.378253 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.378272 kubelet[2000]: W0702 08:43:47.378267 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.378376 kubelet[2000]: E0702 08:43:47.378284 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.378664 kubelet[2000]: E0702 08:43:47.378651 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.378749 kubelet[2000]: W0702 08:43:47.378737 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.378825 kubelet[2000]: E0702 08:43:47.378813 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:47.379069 kubelet[2000]: E0702 08:43:47.379048 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 08:43:47.379069 kubelet[2000]: W0702 08:43:47.379063 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 08:43:47.379160 kubelet[2000]: E0702 08:43:47.379084 2000 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 08:43:48.053882 env[1144]: time="2024-07-02T08:43:48.053810499Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:48.060439 env[1144]: time="2024-07-02T08:43:48.060382003Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:48.066031 env[1144]: time="2024-07-02T08:43:48.065962405Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:48.078299 env[1144]: time="2024-07-02T08:43:48.078227221Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:48.081881 env[1144]: time="2024-07-02T08:43:48.080386727Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9\"" Jul 2 08:43:48.086534 env[1144]: time="2024-07-02T08:43:48.086399343Z" level=info msg="CreateContainer within sandbox \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 08:43:48.130567 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3441874533.mount: Deactivated successfully. Jul 2 08:43:48.146083 env[1144]: time="2024-07-02T08:43:48.146017757Z" level=info msg="CreateContainer within sandbox \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a\"" Jul 2 08:43:48.147090 env[1144]: time="2024-07-02T08:43:48.147047412Z" level=info msg="StartContainer for \"1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a\"" Jul 2 08:43:48.172827 systemd[1]: Started cri-containerd-1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a.scope. Jul 2 08:43:48.184404 systemd[1]: run-containerd-runc-k8s.io-1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a-runc.FrRHqB.mount: Deactivated successfully. Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.207323 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 2 08:43:48.207379 kernel: audit: type=1400 audit(1719909828.205:926): avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fe35906c718 items=0 ppid=2444 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:48.216056 kernel: audit: type=1300 audit(1719909828.205:926): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fe35906c718 items=0 ppid=2444 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:48.216104 kernel: audit: type=1327 audit(1719909828.205:926): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162376632613739623031643436313161393064643663336333393638 Jul 2 08:43:48.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162376632613739623031643436313161393064643663336333393638 Jul 2 08:43:48.219845 kubelet[2000]: E0702 08:43:48.219429 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.229293 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.229394 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.229420 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.240498 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.245480 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.250490 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.255608 kernel: audit: type=1400 audit(1719909828.205:927): avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit: BPF prog-id=133 op=LOAD Jul 2 08:43:48.205000 audit[2599]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000313e38 items=0 ppid=2444 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:48.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162376632613739623031643436313161393064643663336333393638 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit: BPF prog-id=134 op=LOAD Jul 2 08:43:48.205000 audit[2599]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000313e88 items=0 ppid=2444 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:48.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162376632613739623031643436313161393064643663336333393638 Jul 2 08:43:48.205000 audit: BPF prog-id=134 op=UNLOAD Jul 2 08:43:48.205000 audit: BPF prog-id=133 op=UNLOAD Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { perfmon } for pid=2599 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit[2599]: AVC avc: denied { bpf } for pid=2599 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:48.205000 audit: BPF prog-id=135 op=LOAD Jul 2 08:43:48.205000 audit[2599]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000313f18 items=0 ppid=2444 pid=2599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:48.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3162376632613739623031643436313161393064643663336333393638 Jul 2 08:43:48.263295 env[1144]: time="2024-07-02T08:43:48.263238225Z" level=info msg="StartContainer for \"1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a\" returns successfully" Jul 2 08:43:48.271560 systemd[1]: cri-containerd-1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a.scope: Deactivated successfully. Jul 2 08:43:48.274000 audit: BPF prog-id=135 op=UNLOAD Jul 2 08:43:48.389882 env[1144]: time="2024-07-02T08:43:48.389705544Z" level=info msg="shim disconnected" id=1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a Jul 2 08:43:48.389882 env[1144]: time="2024-07-02T08:43:48.389818965Z" level=warning msg="cleaning up after shim disconnected" id=1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a namespace=k8s.io Jul 2 08:43:48.389882 env[1144]: time="2024-07-02T08:43:48.389846486Z" level=info msg="cleaning up dead shim" Jul 2 08:43:48.394161 kubelet[2000]: I0702 08:43:48.394101 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7959fc6ff8-svf8w" podStartSLOduration=4.07263499 podStartE2EDuration="7.394049885s" podCreationTimestamp="2024-07-02 08:43:41 +0000 UTC" firstStartedPulling="2024-07-02 08:43:42.351601465 +0000 UTC m=+20.399011176" lastFinishedPulling="2024-07-02 08:43:45.67301638 +0000 UTC m=+23.720426071" observedRunningTime="2024-07-02 08:43:46.362444633 +0000 UTC m=+24.409854334" watchObservedRunningTime="2024-07-02 08:43:48.394049885 +0000 UTC m=+26.441459576" Jul 2 08:43:48.410053 env[1144]: time="2024-07-02T08:43:48.410014092Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:43:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2641 runtime=io.containerd.runc.v2\n" Jul 2 08:43:49.119144 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1b7f2a79b01d4611a90dd6c3c3968cae75957934d6ee6e824faef7514665035a-rootfs.mount: Deactivated successfully. Jul 2 08:43:49.360849 env[1144]: time="2024-07-02T08:43:49.360744425Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 08:43:50.220912 kubelet[2000]: E0702 08:43:50.220862 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:52.223061 kubelet[2000]: E0702 08:43:52.222952 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:54.219690 kubelet[2000]: E0702 08:43:54.218182 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:56.218545 kubelet[2000]: E0702 08:43:56.218414 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:56.583738 env[1144]: time="2024-07-02T08:43:56.583003832Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:56.587831 env[1144]: time="2024-07-02T08:43:56.587753144Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:56.592168 env[1144]: time="2024-07-02T08:43:56.592090683Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:56.599171 env[1144]: time="2024-07-02T08:43:56.599092121Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:43:56.600178 env[1144]: time="2024-07-02T08:43:56.600116056Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7\"" Jul 2 08:43:56.609540 env[1144]: time="2024-07-02T08:43:56.606437580Z" level=info msg="CreateContainer within sandbox \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 08:43:56.644847 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount137086965.mount: Deactivated successfully. Jul 2 08:43:56.656182 env[1144]: time="2024-07-02T08:43:56.656104109Z" level=info msg="CreateContainer within sandbox \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710\"" Jul 2 08:43:56.658007 env[1144]: time="2024-07-02T08:43:56.657915837Z" level=info msg="StartContainer for \"6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710\"" Jul 2 08:43:56.713804 systemd[1]: run-containerd-runc-k8s.io-6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710-runc.cHB6ts.mount: Deactivated successfully. Jul 2 08:43:56.741231 systemd[1]: Started cri-containerd-6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710.scope. Jul 2 08:43:56.835000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.838635 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 2 08:43:56.838849 kernel: audit: type=1400 audit(1719909836.835:933): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.835000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f2d601c1968 items=0 ppid=2444 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:56.977255 kernel: audit: type=1300 audit(1719909836.835:933): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f2d601c1968 items=0 ppid=2444 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:56.977370 kernel: audit: type=1327 audit(1719909836.835:933): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661653865666433316438636638376661396130363464386662366230 Jul 2 08:43:56.977409 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.977450 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.977527 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.977605 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.977717 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.977746 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.988018 kernel: audit: type=1400 audit(1719909836.837:934): avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661653865666433316438636638376661396130363464386662366230 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.837000 audit: BPF prog-id=136 op=LOAD Jul 2 08:43:56.837000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000262778 items=0 ppid=2444 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:56.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661653865666433316438636638376661396130363464386662366230 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit: BPF prog-id=137 op=LOAD Jul 2 08:43:56.848000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002627c8 items=0 ppid=2444 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:56.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661653865666433316438636638376661396130363464386662366230 Jul 2 08:43:56.848000 audit: BPF prog-id=137 op=UNLOAD Jul 2 08:43:56.848000 audit: BPF prog-id=136 op=UNLOAD Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { perfmon } for pid=2661 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit[2661]: AVC avc: denied { bpf } for pid=2661 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:43:56.848000 audit: BPF prog-id=138 op=LOAD Jul 2 08:43:56.848000 audit[2661]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000262858 items=0 ppid=2444 pid=2661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:56.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661653865666433316438636638376661396130363464386662366230 Jul 2 08:43:57.055484 env[1144]: time="2024-07-02T08:43:57.055368701Z" level=info msg="StartContainer for \"6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710\" returns successfully" Jul 2 08:43:57.563715 kubelet[2000]: I0702 08:43:57.563612 2000 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 08:43:57.719000 audit[2689]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:57.719000 audit[2689]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7fff7f6f1de0 a2=0 a3=7fff7f6f1dcc items=0 ppid=2179 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:57.719000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:57.720000 audit[2689]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:43:57.720000 audit[2689]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff7f6f1de0 a2=0 a3=7fff7f6f1dcc items=0 ppid=2179 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:43:57.720000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:43:58.219376 kubelet[2000]: E0702 08:43:58.219295 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:43:58.647974 env[1144]: time="2024-07-02T08:43:58.647767085Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 08:43:58.650975 systemd[1]: cri-containerd-6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710.scope: Deactivated successfully. Jul 2 08:43:58.653000 audit: BPF prog-id=138 op=UNLOAD Jul 2 08:43:58.678361 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710-rootfs.mount: Deactivated successfully. Jul 2 08:43:58.687689 env[1144]: time="2024-07-02T08:43:58.687614230Z" level=info msg="shim disconnected" id=6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710 Jul 2 08:43:58.687821 env[1144]: time="2024-07-02T08:43:58.687690378Z" level=warning msg="cleaning up after shim disconnected" id=6ae8efd31d8cf87fa9a064d8fb6b017bfb1ca154d7d91d79063dcd47a4eb2710 namespace=k8s.io Jul 2 08:43:58.687821 env[1144]: time="2024-07-02T08:43:58.687709655Z" level=info msg="cleaning up dead shim" Jul 2 08:43:58.696211 env[1144]: time="2024-07-02T08:43:58.696142122Z" level=warning msg="cleanup warnings time=\"2024-07-02T08:43:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2704 runtime=io.containerd.runc.v2\n" Jul 2 08:43:58.746579 kubelet[2000]: I0702 08:43:58.746504 2000 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Jul 2 08:43:58.801156 kubelet[2000]: I0702 08:43:58.801043 2000 topology_manager.go:215] "Topology Admit Handler" podUID="938f05b6-6c93-4b42-a603-a22da6a5dfc3" podNamespace="kube-system" podName="coredns-7db6d8ff4d-lh9pg" Jul 2 08:43:58.805593 kubelet[2000]: I0702 08:43:58.805520 2000 topology_manager.go:215] "Topology Admit Handler" podUID="9dae8282-fb5c-45e8-8caf-f74546be249b" podNamespace="kube-system" podName="coredns-7db6d8ff4d-p2lt8" Jul 2 08:43:58.816814 systemd[1]: Created slice kubepods-burstable-pod938f05b6_6c93_4b42_a603_a22da6a5dfc3.slice. Jul 2 08:43:58.830356 kubelet[2000]: I0702 08:43:58.830272 2000 topology_manager.go:215] "Topology Admit Handler" podUID="dae90b65-e893-4ded-baf6-af0e87f2ead0" podNamespace="calico-system" podName="calico-kube-controllers-55d59c95b7-p6hg8" Jul 2 08:43:58.830359 systemd[1]: Created slice kubepods-burstable-pod9dae8282_fb5c_45e8_8caf_f74546be249b.slice. Jul 2 08:43:58.845770 systemd[1]: Created slice kubepods-besteffort-poddae90b65_e893_4ded_baf6_af0e87f2ead0.slice. Jul 2 08:43:58.870271 kubelet[2000]: I0702 08:43:58.870224 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dae90b65-e893-4ded-baf6-af0e87f2ead0-tigera-ca-bundle\") pod \"calico-kube-controllers-55d59c95b7-p6hg8\" (UID: \"dae90b65-e893-4ded-baf6-af0e87f2ead0\") " pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" Jul 2 08:43:58.870540 kubelet[2000]: I0702 08:43:58.870514 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mdlk4\" (UniqueName: \"kubernetes.io/projected/938f05b6-6c93-4b42-a603-a22da6a5dfc3-kube-api-access-mdlk4\") pod \"coredns-7db6d8ff4d-lh9pg\" (UID: \"938f05b6-6c93-4b42-a603-a22da6a5dfc3\") " pod="kube-system/coredns-7db6d8ff4d-lh9pg" Jul 2 08:43:58.870736 kubelet[2000]: I0702 08:43:58.870688 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sh4j4\" (UniqueName: \"kubernetes.io/projected/dae90b65-e893-4ded-baf6-af0e87f2ead0-kube-api-access-sh4j4\") pod \"calico-kube-controllers-55d59c95b7-p6hg8\" (UID: \"dae90b65-e893-4ded-baf6-af0e87f2ead0\") " pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" Jul 2 08:43:58.870880 kubelet[2000]: I0702 08:43:58.870860 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/9dae8282-fb5c-45e8-8caf-f74546be249b-config-volume\") pod \"coredns-7db6d8ff4d-p2lt8\" (UID: \"9dae8282-fb5c-45e8-8caf-f74546be249b\") " pod="kube-system/coredns-7db6d8ff4d-p2lt8" Jul 2 08:43:58.870995 kubelet[2000]: I0702 08:43:58.870980 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nvrn8\" (UniqueName: \"kubernetes.io/projected/9dae8282-fb5c-45e8-8caf-f74546be249b-kube-api-access-nvrn8\") pod \"coredns-7db6d8ff4d-p2lt8\" (UID: \"9dae8282-fb5c-45e8-8caf-f74546be249b\") " pod="kube-system/coredns-7db6d8ff4d-p2lt8" Jul 2 08:43:58.871107 kubelet[2000]: I0702 08:43:58.871092 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/938f05b6-6c93-4b42-a603-a22da6a5dfc3-config-volume\") pod \"coredns-7db6d8ff4d-lh9pg\" (UID: \"938f05b6-6c93-4b42-a603-a22da6a5dfc3\") " pod="kube-system/coredns-7db6d8ff4d-lh9pg" Jul 2 08:43:59.128522 env[1144]: time="2024-07-02T08:43:59.128349750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-lh9pg,Uid:938f05b6-6c93-4b42-a603-a22da6a5dfc3,Namespace:kube-system,Attempt:0,}" Jul 2 08:43:59.138932 env[1144]: time="2024-07-02T08:43:59.138879680Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-p2lt8,Uid:9dae8282-fb5c-45e8-8caf-f74546be249b,Namespace:kube-system,Attempt:0,}" Jul 2 08:43:59.161148 env[1144]: time="2024-07-02T08:43:59.161105872Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55d59c95b7-p6hg8,Uid:dae90b65-e893-4ded-baf6-af0e87f2ead0,Namespace:calico-system,Attempt:0,}" Jul 2 08:43:59.353746 env[1144]: time="2024-07-02T08:43:59.349979702Z" level=error msg="Failed to destroy network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.353746 env[1144]: time="2024-07-02T08:43:59.350405218Z" level=error msg="encountered an error cleaning up failed sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.353746 env[1144]: time="2024-07-02T08:43:59.350482688Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55d59c95b7-p6hg8,Uid:dae90b65-e893-4ded-baf6-af0e87f2ead0,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.354598 kubelet[2000]: E0702 08:43:59.350722 2000 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.354598 kubelet[2000]: E0702 08:43:59.350805 2000 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" Jul 2 08:43:59.354598 kubelet[2000]: E0702 08:43:59.350831 2000 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" Jul 2 08:43:59.354771 kubelet[2000]: E0702 08:43:59.350882 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-55d59c95b7-p6hg8_calico-system(dae90b65-e893-4ded-baf6-af0e87f2ead0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-55d59c95b7-p6hg8_calico-system(dae90b65-e893-4ded-baf6-af0e87f2ead0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" podUID="dae90b65-e893-4ded-baf6-af0e87f2ead0" Jul 2 08:43:59.371285 env[1144]: time="2024-07-02T08:43:59.371214650Z" level=error msg="Failed to destroy network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.371677 env[1144]: time="2024-07-02T08:43:59.371639184Z" level=error msg="encountered an error cleaning up failed sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.371739 env[1144]: time="2024-07-02T08:43:59.371704792Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-p2lt8,Uid:9dae8282-fb5c-45e8-8caf-f74546be249b,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.372354 kubelet[2000]: E0702 08:43:59.371921 2000 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.372354 kubelet[2000]: E0702 08:43:59.371994 2000 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-p2lt8" Jul 2 08:43:59.372354 kubelet[2000]: E0702 08:43:59.372018 2000 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-p2lt8" Jul 2 08:43:59.372537 kubelet[2000]: E0702 08:43:59.372078 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-p2lt8_kube-system(9dae8282-fb5c-45e8-8caf-f74546be249b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-p2lt8_kube-system(9dae8282-fb5c-45e8-8caf-f74546be249b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-p2lt8" podUID="9dae8282-fb5c-45e8-8caf-f74546be249b" Jul 2 08:43:59.379573 env[1144]: time="2024-07-02T08:43:59.378859149Z" level=error msg="Failed to destroy network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.379751 env[1144]: time="2024-07-02T08:43:59.379705271Z" level=error msg="encountered an error cleaning up failed sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.379825 env[1144]: time="2024-07-02T08:43:59.379766460Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-lh9pg,Uid:938f05b6-6c93-4b42-a603-a22da6a5dfc3,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.380513 kubelet[2000]: E0702 08:43:59.379996 2000 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.380513 kubelet[2000]: E0702 08:43:59.380047 2000 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-lh9pg" Jul 2 08:43:59.380513 kubelet[2000]: E0702 08:43:59.380090 2000 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7db6d8ff4d-lh9pg" Jul 2 08:43:59.380723 kubelet[2000]: E0702 08:43:59.380133 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7db6d8ff4d-lh9pg_kube-system(938f05b6-6c93-4b42-a603-a22da6a5dfc3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7db6d8ff4d-lh9pg_kube-system(938f05b6-6c93-4b42-a603-a22da6a5dfc3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-lh9pg" podUID="938f05b6-6c93-4b42-a603-a22da6a5dfc3" Jul 2 08:43:59.393841 kubelet[2000]: I0702 08:43:59.393236 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:43:59.394225 env[1144]: time="2024-07-02T08:43:59.394193745Z" level=info msg="StopPodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\"" Jul 2 08:43:59.395750 kubelet[2000]: I0702 08:43:59.395331 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:43:59.397974 kubelet[2000]: I0702 08:43:59.397637 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:43:59.398778 env[1144]: time="2024-07-02T08:43:59.398727465Z" level=info msg="StopPodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\"" Jul 2 08:43:59.399524 env[1144]: time="2024-07-02T08:43:59.395975934Z" level=info msg="StopPodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\"" Jul 2 08:43:59.404038 env[1144]: time="2024-07-02T08:43:59.403854788Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 08:43:59.477240 env[1144]: time="2024-07-02T08:43:59.477148166Z" level=error msg="StopPodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" failed" error="failed to destroy network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.480422 kubelet[2000]: E0702 08:43:59.480396 2000 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:43:59.480642 kubelet[2000]: E0702 08:43:59.480600 2000 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1"} Jul 2 08:43:59.480738 kubelet[2000]: E0702 08:43:59.480721 2000 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dae90b65-e893-4ded-baf6-af0e87f2ead0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:43:59.480900 kubelet[2000]: E0702 08:43:59.480878 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dae90b65-e893-4ded-baf6-af0e87f2ead0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" podUID="dae90b65-e893-4ded-baf6-af0e87f2ead0" Jul 2 08:43:59.485346 env[1144]: time="2024-07-02T08:43:59.485238319Z" level=error msg="StopPodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" failed" error="failed to destroy network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.486019 kubelet[2000]: E0702 08:43:59.485780 2000 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:43:59.486019 kubelet[2000]: E0702 08:43:59.485840 2000 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c"} Jul 2 08:43:59.486019 kubelet[2000]: E0702 08:43:59.485933 2000 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"938f05b6-6c93-4b42-a603-a22da6a5dfc3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:43:59.486019 kubelet[2000]: E0702 08:43:59.485965 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"938f05b6-6c93-4b42-a603-a22da6a5dfc3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-lh9pg" podUID="938f05b6-6c93-4b42-a603-a22da6a5dfc3" Jul 2 08:43:59.497676 env[1144]: time="2024-07-02T08:43:59.497605926Z" level=error msg="StopPodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" failed" error="failed to destroy network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:43:59.497946 kubelet[2000]: E0702 08:43:59.497871 2000 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:43:59.497946 kubelet[2000]: E0702 08:43:59.497925 2000 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a"} Jul 2 08:43:59.498169 kubelet[2000]: E0702 08:43:59.497969 2000 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9dae8282-fb5c-45e8-8caf-f74546be249b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:43:59.498169 kubelet[2000]: E0702 08:43:59.498000 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9dae8282-fb5c-45e8-8caf-f74546be249b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7db6d8ff4d-p2lt8" podUID="9dae8282-fb5c-45e8-8caf-f74546be249b" Jul 2 08:43:59.680014 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c-shm.mount: Deactivated successfully. Jul 2 08:44:00.231108 systemd[1]: Created slice kubepods-besteffort-pod2aad6adf_392f_4668_97c8_f175bdff4c5b.slice. Jul 2 08:44:00.236425 env[1144]: time="2024-07-02T08:44:00.236322922Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sn5vm,Uid:2aad6adf-392f-4668-97c8-f175bdff4c5b,Namespace:calico-system,Attempt:0,}" Jul 2 08:44:00.691642 env[1144]: time="2024-07-02T08:44:00.690917890Z" level=error msg="Failed to destroy network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:44:00.691642 env[1144]: time="2024-07-02T08:44:00.694858802Z" level=error msg="encountered an error cleaning up failed sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:44:00.691642 env[1144]: time="2024-07-02T08:44:00.694933346Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sn5vm,Uid:2aad6adf-392f-4668-97c8-f175bdff4c5b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:44:00.693906 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33-shm.mount: Deactivated successfully. Jul 2 08:44:00.697535 kubelet[2000]: E0702 08:44:00.695159 2000 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:44:00.697535 kubelet[2000]: E0702 08:44:00.695218 2000 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:44:00.697535 kubelet[2000]: E0702 08:44:00.695243 2000 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-sn5vm" Jul 2 08:44:00.697808 kubelet[2000]: E0702 08:44:00.695290 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-sn5vm_calico-system(2aad6adf-392f-4668-97c8-f175bdff4c5b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-sn5vm_calico-system(2aad6adf-392f-4668-97c8-f175bdff4c5b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:44:01.410228 kubelet[2000]: I0702 08:44:01.410174 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:01.411433 env[1144]: time="2024-07-02T08:44:01.411345596Z" level=info msg="StopPodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\"" Jul 2 08:44:01.486599 env[1144]: time="2024-07-02T08:44:01.486375637Z" level=error msg="StopPodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" failed" error="failed to destroy network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 08:44:01.488109 kubelet[2000]: E0702 08:44:01.487910 2000 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:01.488109 kubelet[2000]: E0702 08:44:01.488006 2000 kuberuntime_manager.go:1375] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33"} Jul 2 08:44:01.488646 kubelet[2000]: E0702 08:44:01.488424 2000 kuberuntime_manager.go:1075] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2aad6adf-392f-4668-97c8-f175bdff4c5b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 08:44:01.488646 kubelet[2000]: E0702 08:44:01.488554 2000 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2aad6adf-392f-4668-97c8-f175bdff4c5b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-sn5vm" podUID="2aad6adf-392f-4668-97c8-f175bdff4c5b" Jul 2 08:44:09.575100 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3198829540.mount: Deactivated successfully. Jul 2 08:44:09.694183 env[1144]: time="2024-07-02T08:44:09.694094255Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:09.702743 env[1144]: time="2024-07-02T08:44:09.702614935Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:09.706179 env[1144]: time="2024-07-02T08:44:09.706120234Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:09.710006 env[1144]: time="2024-07-02T08:44:09.709950327Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:09.711283 env[1144]: time="2024-07-02T08:44:09.711173878Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49\"" Jul 2 08:44:09.819539 env[1144]: time="2024-07-02T08:44:09.818313259Z" level=info msg="CreateContainer within sandbox \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 08:44:09.859871 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3440713839.mount: Deactivated successfully. Jul 2 08:44:09.860729 env[1144]: time="2024-07-02T08:44:09.860685554Z" level=info msg="CreateContainer within sandbox \"c4b729d16cbfec7794d0010ececb0cd446de97c99474ac87c8244ef0e1caa1cb\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"29fd92caccc258d8c07ca4ed8e433d453da54de0ca80df358b714e89c95844e7\"" Jul 2 08:44:09.862889 env[1144]: time="2024-07-02T08:44:09.862859483Z" level=info msg="StartContainer for \"29fd92caccc258d8c07ca4ed8e433d453da54de0ca80df358b714e89c95844e7\"" Jul 2 08:44:09.897971 systemd[1]: Started cri-containerd-29fd92caccc258d8c07ca4ed8e433d453da54de0ca80df358b714e89c95844e7.scope. Jul 2 08:44:09.932000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.934039 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 2 08:44:09.934109 kernel: audit: type=1400 audit(1719909849.932:942): avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.932000 audit[2936]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f6aa17a1478 items=0 ppid=2444 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:09.942601 kernel: audit: type=1300 audit(1719909849.932:942): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f6aa17a1478 items=0 ppid=2444 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:09.942646 kernel: audit: type=1327 audit(1719909849.932:942): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239666439326361636363323538643863303763613465643865343333 Jul 2 08:44:09.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239666439326361636363323538643863303763613465643865343333 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.951220 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.951284 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.962347 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.962419 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.962446 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.969627 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.977258 kernel: audit: type=1400 audit(1719909849.933:943): avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.933000 audit: BPF prog-id=139 op=LOAD Jul 2 08:44:09.933000 audit[2936]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003083d8 items=0 ppid=2444 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:09.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239666439326361636363323538643863303763613465643865343333 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.937000 audit: BPF prog-id=140 op=LOAD Jul 2 08:44:09.937000 audit[2936]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000308428 items=0 ppid=2444 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:09.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239666439326361636363323538643863303763613465643865343333 Jul 2 08:44:09.947000 audit: BPF prog-id=140 op=UNLOAD Jul 2 08:44:09.947000 audit: BPF prog-id=139 op=UNLOAD Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { perfmon } for pid=2936 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit[2936]: AVC avc: denied { bpf } for pid=2936 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:09.950000 audit: BPF prog-id=141 op=LOAD Jul 2 08:44:09.950000 audit[2936]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003084b8 items=0 ppid=2444 pid=2936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:09.950000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239666439326361636363323538643863303763613465643865343333 Jul 2 08:44:09.993761 env[1144]: time="2024-07-02T08:44:09.993705797Z" level=info msg="StartContainer for \"29fd92caccc258d8c07ca4ed8e433d453da54de0ca80df358b714e89c95844e7\" returns successfully" Jul 2 08:44:10.110385 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 08:44:10.110786 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 08:44:10.238303 env[1144]: time="2024-07-02T08:44:10.237793931Z" level=info msg="StopPodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\"" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:10.337 [INFO][2996] k8s.go 608: Cleaning up netns ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:10.338 [INFO][2996] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" iface="eth0" netns="/var/run/netns/cni-7ebed148-123a-80d7-640f-94d0c4d73fe2" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:10.338 [INFO][2996] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" iface="eth0" netns="/var/run/netns/cni-7ebed148-123a-80d7-640f-94d0c4d73fe2" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:10.338 [INFO][2996] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" iface="eth0" netns="/var/run/netns/cni-7ebed148-123a-80d7-640f-94d0c4d73fe2" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:10.338 [INFO][2996] k8s.go 615: Releasing IP address(es) ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:10.338 [INFO][2996] utils.go 188: Calico CNI releasing IP address ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.957 [INFO][3004] ipam_plugin.go 411: Releasing address using handleID ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.960 [INFO][3004] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.963 [INFO][3004] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.985 [WARNING][3004] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.985 [INFO][3004] ipam_plugin.go 439: Releasing address using workloadID ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.995 [INFO][3004] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:12.002915 env[1144]: 2024-07-02 08:44:11.999 [INFO][2996] k8s.go 621: Teardown processing complete. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:12.013494 env[1144]: time="2024-07-02T08:44:12.003194825Z" level=info msg="TearDown network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" successfully" Jul 2 08:44:12.013494 env[1144]: time="2024-07-02T08:44:12.003259268Z" level=info msg="StopPodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" returns successfully" Jul 2 08:44:12.013494 env[1144]: time="2024-07-02T08:44:12.005103445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-p2lt8,Uid:9dae8282-fb5c-45e8-8caf-f74546be249b,Namespace:kube-system,Attempt:1,}" Jul 2 08:44:12.009255 systemd[1]: run-netns-cni\x2d7ebed148\x2d123a\x2d80d7\x2d640f\x2d94d0c4d73fe2.mount: Deactivated successfully. Jul 2 08:44:12.256000 audit[3097]: AVC avc: denied { write } for pid=3097 comm="tee" name="fd" dev="proc" ino=25589 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.256000 audit[3097]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff2bc69a01 a2=241 a3=1b6 items=1 ppid=3086 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.256000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 08:44:12.256000 audit: PATH item=0 name="/dev/fd/63" inode=25979 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.256000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.288000 audit[3121]: AVC avc: denied { write } for pid=3121 comm="tee" name="fd" dev="proc" ino=26004 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.288000 audit[3121]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffca07e7a00 a2=241 a3=1b6 items=1 ppid=3107 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.288000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 08:44:12.288000 audit: PATH item=0 name="/dev/fd/63" inode=25991 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.288000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.310000 audit[3129]: AVC avc: denied { write } for pid=3129 comm="tee" name="fd" dev="proc" ino=26644 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.310000 audit[3129]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffffbfa8a00 a2=241 a3=1b6 items=1 ppid=3088 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.310000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 08:44:12.310000 audit: PATH item=0 name="/dev/fd/63" inode=25591 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.310000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.335000 audit[3143]: AVC avc: denied { write } for pid=3143 comm="tee" name="fd" dev="proc" ino=26660 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.335000 audit[3143]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc94e27a02 a2=241 a3=1b6 items=1 ppid=3094 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.335000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 08:44:12.335000 audit: PATH item=0 name="/dev/fd/63" inode=26647 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.335000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.354000 audit[3158]: AVC avc: denied { write } for pid=3158 comm="tee" name="fd" dev="proc" ino=26668 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.357000 audit[3154]: AVC avc: denied { write } for pid=3154 comm="tee" name="fd" dev="proc" ino=26671 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.367000 audit[3148]: AVC avc: denied { write } for pid=3148 comm="tee" name="fd" dev="proc" ino=26674 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 08:44:12.367000 audit[3148]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe79b0fa00 a2=241 a3=1b6 items=1 ppid=3092 pid=3148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.367000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 08:44:12.367000 audit: PATH item=0 name="/dev/fd/63" inode=26651 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.367000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.405496 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali41efc422ae7: link becomes ready Jul 2 08:44:12.408168 systemd-networkd[969]: cali41efc422ae7: Link UP Jul 2 08:44:12.408396 systemd-networkd[969]: cali41efc422ae7: Gained carrier Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.151 [INFO][3066] utils.go 100: File /var/lib/calico/mtu does not exist Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.178 [INFO][3066] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0 coredns-7db6d8ff4d- kube-system 9dae8282-fb5c-45e8-8caf-f74546be249b 723 0 2024-07-02 08:43:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-5-1-a8b80a6678.novalocal coredns-7db6d8ff4d-p2lt8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali41efc422ae7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.178 [INFO][3066] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.240 [INFO][3095] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" HandleID="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.278 [INFO][3095] ipam_plugin.go 264: Auto assigning IP ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" HandleID="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002efde0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-5-1-a8b80a6678.novalocal", "pod":"coredns-7db6d8ff4d-p2lt8", "timestamp":"2024-07-02 08:44:12.240891041 +0000 UTC"}, Hostname:"ci-3510-3-5-1-a8b80a6678.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.278 [INFO][3095] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.278 [INFO][3095] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.278 [INFO][3095] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-1-a8b80a6678.novalocal' Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.284 [INFO][3095] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.302 [INFO][3095] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.341 [INFO][3095] ipam.go 489: Trying affinity for 192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.344 [INFO][3095] ipam.go 155: Attempting to load block cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.347 [INFO][3095] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.347 [INFO][3095] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.106.0/26 handle="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.352 [INFO][3095] ipam.go 1685: Creating new handle: k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3 Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.359 [INFO][3095] ipam.go 1203: Writing block in order to claim IPs block=192.168.106.0/26 handle="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.383 [INFO][3095] ipam.go 1216: Successfully claimed IPs: [192.168.106.1/26] block=192.168.106.0/26 handle="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.383 [INFO][3095] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.106.1/26] handle="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.383 [INFO][3095] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:12.442014 env[1144]: 2024-07-02 08:44:12.383 [INFO][3095] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.106.1/26] IPv6=[] ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" HandleID="k8s-pod-network.8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.442881 env[1144]: 2024-07-02 08:44:12.386 [INFO][3066] k8s.go 386: Populated endpoint ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"9dae8282-fb5c-45e8-8caf-f74546be249b", ResourceVersion:"723", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"", Pod:"coredns-7db6d8ff4d-p2lt8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali41efc422ae7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:12.442881 env[1144]: 2024-07-02 08:44:12.386 [INFO][3066] k8s.go 387: Calico CNI using IPs: [192.168.106.1/32] ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.442881 env[1144]: 2024-07-02 08:44:12.386 [INFO][3066] dataplane_linux.go 68: Setting the host side veth name to cali41efc422ae7 ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.442881 env[1144]: 2024-07-02 08:44:12.403 [INFO][3066] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.442881 env[1144]: 2024-07-02 08:44:12.409 [INFO][3066] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"9dae8282-fb5c-45e8-8caf-f74546be249b", ResourceVersion:"723", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3", Pod:"coredns-7db6d8ff4d-p2lt8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali41efc422ae7", MAC:"46:2a:c4:04:32:1e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:12.442881 env[1144]: 2024-07-02 08:44:12.439 [INFO][3066] k8s.go 500: Wrote updated endpoint to datastore ContainerID="8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3" Namespace="kube-system" Pod="coredns-7db6d8ff4d-p2lt8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:12.451095 kubelet[2000]: I0702 08:44:12.450435 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-nwg27" podStartSLOduration=4.092727967 podStartE2EDuration="31.432907352s" podCreationTimestamp="2024-07-02 08:43:41 +0000 UTC" firstStartedPulling="2024-07-02 08:43:42.384949019 +0000 UTC m=+20.432358710" lastFinishedPulling="2024-07-02 08:44:09.725128354 +0000 UTC m=+47.772538095" observedRunningTime="2024-07-02 08:44:10.536158349 +0000 UTC m=+48.583568060" watchObservedRunningTime="2024-07-02 08:44:12.432907352 +0000 UTC m=+50.480317054" Jul 2 08:44:12.483803 env[1144]: time="2024-07-02T08:44:12.483481484Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:44:12.484057 env[1144]: time="2024-07-02T08:44:12.484031338Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:44:12.484185 env[1144]: time="2024-07-02T08:44:12.484153502Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:44:12.487316 env[1144]: time="2024-07-02T08:44:12.484451104Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3 pid=3190 runtime=io.containerd.runc.v2 Jul 2 08:44:12.354000 audit[3158]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffeab7e9f1 a2=241 a3=1b6 items=1 ppid=3091 pid=3158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.354000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 08:44:12.354000 audit: PATH item=0 name="/dev/fd/63" inode=26655 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.354000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.529260 systemd[1]: Started cri-containerd-8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3.scope. Jul 2 08:44:12.357000 audit[3154]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc65ce49f0 a2=241 a3=1b6 items=1 ppid=3106 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.357000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 08:44:12.357000 audit: PATH item=0 name="/dev/fd/63" inode=26654 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 08:44:12.357000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.563000 audit: BPF prog-id=142 op=LOAD Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3190 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653135663738393463613562393864613064633832656662646139 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3190 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653135663738393463613562393864613064633832656662646139 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.564000 audit: BPF prog-id=143 op=LOAD Jul 2 08:44:12.564000 audit[3202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00030d320 items=0 ppid=3190 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653135663738393463613562393864613064633832656662646139 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.567000 audit: BPF prog-id=144 op=LOAD Jul 2 08:44:12.567000 audit[3202]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00030d368 items=0 ppid=3190 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653135663738393463613562393864613064633832656662646139 Jul 2 08:44:12.568000 audit: BPF prog-id=144 op=UNLOAD Jul 2 08:44:12.569000 audit: BPF prog-id=143 op=UNLOAD Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.569000 audit: BPF prog-id=145 op=LOAD Jul 2 08:44:12.569000 audit[3202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00030d778 items=0 ppid=3190 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863653135663738393463613562393864613064633832656662646139 Jul 2 08:44:12.618801 env[1144]: time="2024-07-02T08:44:12.618745004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-p2lt8,Uid:9dae8282-fb5c-45e8-8caf-f74546be249b,Namespace:kube-system,Attempt:1,} returns sandbox id \"8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3\"" Jul 2 08:44:12.632551 env[1144]: time="2024-07-02T08:44:12.632496988Z" level=info msg="CreateContainer within sandbox \"8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 08:44:12.694177 env[1144]: time="2024-07-02T08:44:12.694093107Z" level=info msg="CreateContainer within sandbox \"8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"046b6f8c3b7cfbb22321f4883ed1e13f6e2ae4db64b7a85d7c8d7f0d07740cd8\"" Jul 2 08:44:12.695092 env[1144]: time="2024-07-02T08:44:12.695041196Z" level=info msg="StartContainer for \"046b6f8c3b7cfbb22321f4883ed1e13f6e2ae4db64b7a85d7c8d7f0d07740cd8\"" Jul 2 08:44:12.716540 systemd[1]: Started cri-containerd-046b6f8c3b7cfbb22321f4883ed1e13f6e2ae4db64b7a85d7c8d7f0d07740cd8.scope. Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.771000 audit: BPF prog-id=146 op=LOAD Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3190 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366236663863336237636662623232333231663438383365643165 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3190 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366236663863336237636662623232333231663438383365643165 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit: BPF prog-id=147 op=LOAD Jul 2 08:44:12.773000 audit[3233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003205b0 items=0 ppid=3190 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366236663863336237636662623232333231663438383365643165 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit: BPF prog-id=148 op=LOAD Jul 2 08:44:12.773000 audit[3233]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003205f8 items=0 ppid=3190 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366236663863336237636662623232333231663438383365643165 Jul 2 08:44:12.773000 audit: BPF prog-id=148 op=UNLOAD Jul 2 08:44:12.773000 audit: BPF prog-id=147 op=UNLOAD Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { perfmon } for pid=3233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit[3233]: AVC avc: denied { bpf } for pid=3233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:12.773000 audit: BPF prog-id=149 op=LOAD Jul 2 08:44:12.773000 audit[3233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000320a08 items=0 ppid=3190 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:12.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366236663863336237636662623232333231663438383365643165 Jul 2 08:44:12.827563 env[1144]: time="2024-07-02T08:44:12.827514966Z" level=info msg="StartContainer for \"046b6f8c3b7cfbb22321f4883ed1e13f6e2ae4db64b7a85d7c8d7f0d07740cd8\" returns successfully" Jul 2 08:44:13.010340 systemd[1]: run-containerd-runc-k8s.io-8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3-runc.QlwYXU.mount: Deactivated successfully. Jul 2 08:44:13.219612 env[1144]: time="2024-07-02T08:44:13.219577717Z" level=info msg="StopPodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\"" Jul 2 08:44:13.220103 env[1144]: time="2024-07-02T08:44:13.219542729Z" level=info msg="StopPodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\"" Jul 2 08:44:13.220495 env[1144]: time="2024-07-02T08:44:13.220447683Z" level=info msg="StopPodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\"" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.318 [INFO][3343] k8s.go 608: Cleaning up netns ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.318 [INFO][3343] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" iface="eth0" netns="/var/run/netns/cni-8b75ef03-56af-be12-d324-b0c3381bdd88" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.318 [INFO][3343] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" iface="eth0" netns="/var/run/netns/cni-8b75ef03-56af-be12-d324-b0c3381bdd88" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.319 [INFO][3343] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" iface="eth0" netns="/var/run/netns/cni-8b75ef03-56af-be12-d324-b0c3381bdd88" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.319 [INFO][3343] k8s.go 615: Releasing IP address(es) ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.319 [INFO][3343] utils.go 188: Calico CNI releasing IP address ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.424 [INFO][3363] ipam_plugin.go 411: Releasing address using handleID ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.424 [INFO][3363] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.425 [INFO][3363] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.441 [WARNING][3363] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.441 [INFO][3363] ipam_plugin.go 439: Releasing address using workloadID ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.452 [INFO][3363] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:13.463302 env[1144]: 2024-07-02 08:44:13.456 [INFO][3343] k8s.go 621: Teardown processing complete. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:13.467652 systemd[1]: run-netns-cni\x2d8b75ef03\x2d56af\x2dbe12\x2dd324\x2db0c3381bdd88.mount: Deactivated successfully. Jul 2 08:44:13.478712 env[1144]: time="2024-07-02T08:44:13.478082311Z" level=info msg="TearDown network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" successfully" Jul 2 08:44:13.478913 env[1144]: time="2024-07-02T08:44:13.478881182Z" level=info msg="StopPodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" returns successfully" Jul 2 08:44:13.482160 env[1144]: time="2024-07-02T08:44:13.480848102Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sn5vm,Uid:2aad6adf-392f-4668-97c8-f175bdff4c5b,Namespace:calico-system,Attempt:1,}" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.385 [INFO][3355] k8s.go 608: Cleaning up netns ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.385 [INFO][3355] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" iface="eth0" netns="/var/run/netns/cni-3b871f29-a85d-643f-f8f4-d67001c5d805" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.385 [INFO][3355] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" iface="eth0" netns="/var/run/netns/cni-3b871f29-a85d-643f-f8f4-d67001c5d805" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.387 [INFO][3355] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" iface="eth0" netns="/var/run/netns/cni-3b871f29-a85d-643f-f8f4-d67001c5d805" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.387 [INFO][3355] k8s.go 615: Releasing IP address(es) ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.387 [INFO][3355] utils.go 188: Calico CNI releasing IP address ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.435 [INFO][3373] ipam_plugin.go 411: Releasing address using handleID ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.435 [INFO][3373] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.463 [INFO][3373] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.491 [WARNING][3373] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.491 [INFO][3373] ipam_plugin.go 439: Releasing address using workloadID ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.493 [INFO][3373] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:13.498320 env[1144]: 2024-07-02 08:44:13.495 [INFO][3355] k8s.go 621: Teardown processing complete. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:13.513153 env[1144]: time="2024-07-02T08:44:13.502590148Z" level=info msg="TearDown network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" successfully" Jul 2 08:44:13.513153 env[1144]: time="2024-07-02T08:44:13.502626748Z" level=info msg="StopPodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" returns successfully" Jul 2 08:44:13.513153 env[1144]: time="2024-07-02T08:44:13.503219544Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55d59c95b7-p6hg8,Uid:dae90b65-e893-4ded-baf6-af0e87f2ead0,Namespace:calico-system,Attempt:1,}" Jul 2 08:44:13.501176 systemd[1]: run-netns-cni\x2d3b871f29\x2da85d\x2d643f\x2df8f4\x2dd67001c5d805.mount: Deactivated successfully. Jul 2 08:44:13.506326 systemd-networkd[969]: vxlan.calico: Link UP Jul 2 08:44:13.506331 systemd-networkd[969]: vxlan.calico: Gained carrier Jul 2 08:44:13.558620 kubelet[2000]: I0702 08:44:13.558547 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-p2lt8" podStartSLOduration=39.558526824 podStartE2EDuration="39.558526824s" podCreationTimestamp="2024-07-02 08:43:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:44:13.558172886 +0000 UTC m=+51.605582587" watchObservedRunningTime="2024-07-02 08:44:13.558526824 +0000 UTC m=+51.605936526" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.411 [INFO][3350] k8s.go 608: Cleaning up netns ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.411 [INFO][3350] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" iface="eth0" netns="/var/run/netns/cni-df2213f6-1562-38bb-20d0-f59ebc5d4006" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.412 [INFO][3350] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" iface="eth0" netns="/var/run/netns/cni-df2213f6-1562-38bb-20d0-f59ebc5d4006" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.412 [INFO][3350] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" iface="eth0" netns="/var/run/netns/cni-df2213f6-1562-38bb-20d0-f59ebc5d4006" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.412 [INFO][3350] k8s.go 615: Releasing IP address(es) ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.412 [INFO][3350] utils.go 188: Calico CNI releasing IP address ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.536 [INFO][3379] ipam_plugin.go 411: Releasing address using handleID ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.536 [INFO][3379] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.536 [INFO][3379] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.560 [WARNING][3379] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.564 [INFO][3379] ipam_plugin.go 439: Releasing address using workloadID ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.578 [INFO][3379] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:13.584566 env[1144]: 2024-07-02 08:44:13.580 [INFO][3350] k8s.go 621: Teardown processing complete. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:13.585364 env[1144]: time="2024-07-02T08:44:13.585326503Z" level=info msg="TearDown network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" successfully" Jul 2 08:44:13.585450 env[1144]: time="2024-07-02T08:44:13.585431043Z" level=info msg="StopPodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" returns successfully" Jul 2 08:44:13.586987 env[1144]: time="2024-07-02T08:44:13.586941227Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-lh9pg,Uid:938f05b6-6c93-4b42-a603-a22da6a5dfc3,Namespace:kube-system,Attempt:1,}" Jul 2 08:44:13.587851 systemd[1]: run-netns-cni\x2ddf2213f6\x2d1562\x2d38bb\x2d20d0\x2df59ebc5d4006.mount: Deactivated successfully. Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.687000 audit: BPF prog-id=150 op=LOAD Jul 2 08:44:13.687000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcb3d39420 a2=70 a3=7f2875cd6000 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.687000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.691000 audit: BPF prog-id=150 op=UNLOAD Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.691000 audit: BPF prog-id=151 op=LOAD Jul 2 08:44:13.691000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcb3d39420 a2=70 a3=6f items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.691000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.692000 audit: BPF prog-id=151 op=UNLOAD Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffcb3d393d0 a2=70 a3=470860 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.692000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.692000 audit: BPF prog-id=152 op=LOAD Jul 2 08:44:13.692000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffcb3d393b0 a2=70 a3=7ffcb3d39420 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.692000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.692000 audit: BPF prog-id=152 op=UNLOAD Jul 2 08:44:13.693000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.693000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcb3d39490 a2=70 a3=0 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.693000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.693000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.693000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcb3d39480 a2=70 a3=0 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.693000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.693000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.693000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcb3d393f0 a2=70 a3=0 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.693000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.697000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.697000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffcb3d394c0 a2=70 a3=fe00 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.697000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.699000 audit[3429]: NETFILTER_CFG table=filter:97 family=2 entries=14 op=nft_register_rule pid=3429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:13.699000 audit[3429]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7fffd83eac00 a2=0 a3=7fffd83eabec items=0 ppid=2179 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcb3d394c0 a2=70 a3=fe00 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.700000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { perfmon } for pid=3415 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit[3415]: AVC avc: denied { bpf } for pid=3415 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.700000 audit: BPF prog-id=153 op=LOAD Jul 2 08:44:13.700000 audit[3415]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcb3d393e0 a2=70 a3=0 items=0 ppid=3103 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.700000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 08:44:13.704000 audit[3429]: NETFILTER_CFG table=nat:98 family=2 entries=14 op=nft_register_rule pid=3429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:13.704000 audit[3429]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fffd83eac00 a2=0 a3=0 items=0 ppid=2179 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.704000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:13.718000 audit[3435]: AVC avc: denied { bpf } for pid=3435 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.718000 audit[3435]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffec3f47be0 a2=70 a3=ffff items=0 ppid=3103 pid=3435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.718000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 08:44:13.718000 audit[3435]: AVC avc: denied { bpf } for pid=3435 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:13.718000 audit[3435]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffec3f47ab0 a2=70 a3=3 items=0 ppid=3103 pid=3435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.718000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 08:44:13.728000 audit: BPF prog-id=153 op=UNLOAD Jul 2 08:44:13.728000 audit[1087]: SYSCALL arch=c000003e syscall=1 success=yes exit=48 a0=d a1=556f0921ecc0 a2=30 a3=6c0f5937ccb5464f items=0 ppid=1 pid=1087 auid=4294967295 uid=245 gid=245 euid=245 suid=245 fsuid=245 egid=245 sgid=245 fsgid=245 tty=(none) ses=4294967295 comm="systemd-resolve" exe="/usr/lib/systemd/systemd-resolved" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:13.728000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-resolved" Jul 2 08:44:13.978016 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califa632be7ae5: link becomes ready Jul 2 08:44:13.977629 systemd-networkd[969]: califa632be7ae5: Link UP Jul 2 08:44:13.977817 systemd-networkd[969]: califa632be7ae5: Gained carrier Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.675 [INFO][3395] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0 csi-node-driver- calico-system 2aad6adf-392f-4668-97c8-f175bdff4c5b 748 0 2024-07-02 08:43:42 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:6cc9df58f4 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-5-1-a8b80a6678.novalocal csi-node-driver-sn5vm eth0 default [] [] [kns.calico-system ksa.calico-system.default] califa632be7ae5 [] []}} ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.681 [INFO][3395] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.882 [INFO][3431] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" HandleID="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.915 [INFO][3431] ipam_plugin.go 264: Auto assigning IP ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" HandleID="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000322420), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-5-1-a8b80a6678.novalocal", "pod":"csi-node-driver-sn5vm", "timestamp":"2024-07-02 08:44:13.882356839 +0000 UTC"}, Hostname:"ci-3510-3-5-1-a8b80a6678.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.915 [INFO][3431] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.915 [INFO][3431] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.915 [INFO][3431] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-1-a8b80a6678.novalocal' Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.918 [INFO][3431] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.925 [INFO][3431] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.939 [INFO][3431] ipam.go 489: Trying affinity for 192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.943 [INFO][3431] ipam.go 155: Attempting to load block cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.946 [INFO][3431] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.946 [INFO][3431] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.106.0/26 handle="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.951 [INFO][3431] ipam.go 1685: Creating new handle: k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.959 [INFO][3431] ipam.go 1203: Writing block in order to claim IPs block=192.168.106.0/26 handle="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.970 [INFO][3431] ipam.go 1216: Successfully claimed IPs: [192.168.106.2/26] block=192.168.106.0/26 handle="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.970 [INFO][3431] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.106.2/26] handle="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.970 [INFO][3431] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:14.026790 env[1144]: 2024-07-02 08:44:13.970 [INFO][3431] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.106.2/26] IPv6=[] ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" HandleID="k8s-pod-network.72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.027621 env[1144]: 2024-07-02 08:44:13.972 [INFO][3395] k8s.go 386: Populated endpoint ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2aad6adf-392f-4668-97c8-f175bdff4c5b", ResourceVersion:"748", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6cc9df58f4", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"", Pod:"csi-node-driver-sn5vm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.106.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa632be7ae5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:14.027621 env[1144]: 2024-07-02 08:44:13.972 [INFO][3395] k8s.go 387: Calico CNI using IPs: [192.168.106.2/32] ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.027621 env[1144]: 2024-07-02 08:44:13.972 [INFO][3395] dataplane_linux.go 68: Setting the host side veth name to califa632be7ae5 ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.027621 env[1144]: 2024-07-02 08:44:13.975 [INFO][3395] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.027621 env[1144]: 2024-07-02 08:44:13.978 [INFO][3395] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2aad6adf-392f-4668-97c8-f175bdff4c5b", ResourceVersion:"748", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6cc9df58f4", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f", Pod:"csi-node-driver-sn5vm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.106.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa632be7ae5", MAC:"4a:03:10:3b:a1:7e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:14.027621 env[1144]: 2024-07-02 08:44:14.020 [INFO][3395] k8s.go 500: Wrote updated endpoint to datastore ContainerID="72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f" Namespace="calico-system" Pod="csi-node-driver-sn5vm" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:14.089902 env[1144]: time="2024-07-02T08:44:14.089804665Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:44:14.090234 env[1144]: time="2024-07-02T08:44:14.090195053Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:44:14.090370 env[1144]: time="2024-07-02T08:44:14.090344790Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:44:14.090803 env[1144]: time="2024-07-02T08:44:14.090752511Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f pid=3533 runtime=io.containerd.runc.v2 Jul 2 08:44:14.089000 audit[3512]: NETFILTER_CFG table=raw:99 family=2 entries=19 op=nft_register_chain pid=3512 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:14.089000 audit[3512]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffed271dc70 a2=0 a3=7ffed271dc5c items=0 ppid=3103 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.089000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:14.098000 audit[3513]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3513 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:14.098000 audit[3513]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fffdf012070 a2=0 a3=7fffdf01205c items=0 ppid=3103 pid=3513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.098000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:14.100000 audit[3524]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3524 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:14.100000 audit[3524]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffcfedc0b90 a2=0 a3=7ffcfedc0b7c items=0 ppid=3103 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.100000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:14.132446 systemd-networkd[969]: calie561b42eef9: Link UP Jul 2 08:44:14.136003 systemd-networkd[969]: calie561b42eef9: Gained carrier Jul 2 08:44:14.136555 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie561b42eef9: link becomes ready Jul 2 08:44:14.143129 systemd[1]: Started cri-containerd-72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f.scope. Jul 2 08:44:14.155811 systemd[1]: run-containerd-runc-k8s.io-72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f-runc.0e08ch.mount: Deactivated successfully. Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:13.915 [INFO][3424] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0 coredns-7db6d8ff4d- kube-system 938f05b6-6c93-4b42-a603-a22da6a5dfc3 750 0 2024-07-02 08:43:34 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7db6d8ff4d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-5-1-a8b80a6678.novalocal coredns-7db6d8ff4d-lh9pg eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calie561b42eef9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:13.915 [INFO][3424] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.004 [INFO][3495] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" HandleID="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.035 [INFO][3495] ipam_plugin.go 264: Auto assigning IP ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" HandleID="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002e7970), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-5-1-a8b80a6678.novalocal", "pod":"coredns-7db6d8ff4d-lh9pg", "timestamp":"2024-07-02 08:44:14.004832644 +0000 UTC"}, Hostname:"ci-3510-3-5-1-a8b80a6678.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.035 [INFO][3495] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.035 [INFO][3495] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.036 [INFO][3495] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-1-a8b80a6678.novalocal' Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.038 [INFO][3495] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.045 [INFO][3495] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.053 [INFO][3495] ipam.go 489: Trying affinity for 192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.070 [INFO][3495] ipam.go 155: Attempting to load block cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.075 [INFO][3495] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.076 [INFO][3495] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.106.0/26 handle="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.086 [INFO][3495] ipam.go 1685: Creating new handle: k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397 Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.097 [INFO][3495] ipam.go 1203: Writing block in order to claim IPs block=192.168.106.0/26 handle="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.111 [INFO][3495] ipam.go 1216: Successfully claimed IPs: [192.168.106.3/26] block=192.168.106.0/26 handle="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.112 [INFO][3495] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.106.3/26] handle="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.112 [INFO][3495] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:14.164055 env[1144]: 2024-07-02 08:44:14.112 [INFO][3495] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.106.3/26] IPv6=[] ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" HandleID="k8s-pod-network.9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.166597 env[1144]: 2024-07-02 08:44:14.117 [INFO][3424] k8s.go 386: Populated endpoint ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"938f05b6-6c93-4b42-a603-a22da6a5dfc3", ResourceVersion:"750", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"", Pod:"coredns-7db6d8ff4d-lh9pg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie561b42eef9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:14.166597 env[1144]: 2024-07-02 08:44:14.118 [INFO][3424] k8s.go 387: Calico CNI using IPs: [192.168.106.3/32] ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.166597 env[1144]: 2024-07-02 08:44:14.118 [INFO][3424] dataplane_linux.go 68: Setting the host side veth name to calie561b42eef9 ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.166597 env[1144]: 2024-07-02 08:44:14.136 [INFO][3424] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.166597 env[1144]: 2024-07-02 08:44:14.139 [INFO][3424] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"938f05b6-6c93-4b42-a603-a22da6a5dfc3", ResourceVersion:"750", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397", Pod:"coredns-7db6d8ff4d-lh9pg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie561b42eef9", MAC:"fe:c0:15:47:c3:e8", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:14.166597 env[1144]: 2024-07-02 08:44:14.162 [INFO][3424] k8s.go 500: Wrote updated endpoint to datastore ContainerID="9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397" Namespace="kube-system" Pod="coredns-7db6d8ff4d-lh9pg" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:14.200961 env[1144]: time="2024-07-02T08:44:14.197892285Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:44:14.200961 env[1144]: time="2024-07-02T08:44:14.198198100Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:44:14.200961 env[1144]: time="2024-07-02T08:44:14.198213951Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:44:14.200961 env[1144]: time="2024-07-02T08:44:14.198382102Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397 pid=3574 runtime=io.containerd.runc.v2 Jul 2 08:44:14.217985 systemd-networkd[969]: cali548d7bbfdfd: Link UP Jul 2 08:44:14.226171 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali548d7bbfdfd: link becomes ready Jul 2 08:44:14.225988 systemd-networkd[969]: cali548d7bbfdfd: Gained carrier Jul 2 08:44:14.261529 systemd[1]: Started cri-containerd-9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397.scope. Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:13.867 [INFO][3414] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0 calico-kube-controllers-55d59c95b7- calico-system dae90b65-e893-4ded-baf6-af0e87f2ead0 749 0 2024-07-02 08:43:42 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:55d59c95b7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-5-1-a8b80a6678.novalocal calico-kube-controllers-55d59c95b7-p6hg8 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali548d7bbfdfd [] []}} ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:13.868 [INFO][3414] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.042 [INFO][3490] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" HandleID="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.073 [INFO][3490] ipam_plugin.go 264: Auto assigning IP ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" HandleID="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003700d0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-5-1-a8b80a6678.novalocal", "pod":"calico-kube-controllers-55d59c95b7-p6hg8", "timestamp":"2024-07-02 08:44:14.042694109 +0000 UTC"}, Hostname:"ci-3510-3-5-1-a8b80a6678.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.073 [INFO][3490] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.112 [INFO][3490] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.112 [INFO][3490] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-1-a8b80a6678.novalocal' Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.115 [INFO][3490] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.138 [INFO][3490] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.166 [INFO][3490] ipam.go 489: Trying affinity for 192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.171 [INFO][3490] ipam.go 155: Attempting to load block cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.178 [INFO][3490] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.178 [INFO][3490] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.106.0/26 handle="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.192 [INFO][3490] ipam.go 1685: Creating new handle: k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0 Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.197 [INFO][3490] ipam.go 1203: Writing block in order to claim IPs block=192.168.106.0/26 handle="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.212 [INFO][3490] ipam.go 1216: Successfully claimed IPs: [192.168.106.4/26] block=192.168.106.0/26 handle="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.212 [INFO][3490] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.106.4/26] handle="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.212 [INFO][3490] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:14.269547 env[1144]: 2024-07-02 08:44:14.212 [INFO][3490] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.106.4/26] IPv6=[] ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" HandleID="k8s-pod-network.84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.271302 env[1144]: 2024-07-02 08:44:14.214 [INFO][3414] k8s.go 386: Populated endpoint ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0", GenerateName:"calico-kube-controllers-55d59c95b7-", Namespace:"calico-system", SelfLink:"", UID:"dae90b65-e893-4ded-baf6-af0e87f2ead0", ResourceVersion:"749", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55d59c95b7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"", Pod:"calico-kube-controllers-55d59c95b7-p6hg8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.106.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali548d7bbfdfd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:14.271302 env[1144]: 2024-07-02 08:44:14.215 [INFO][3414] k8s.go 387: Calico CNI using IPs: [192.168.106.4/32] ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.271302 env[1144]: 2024-07-02 08:44:14.215 [INFO][3414] dataplane_linux.go 68: Setting the host side veth name to cali548d7bbfdfd ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.271302 env[1144]: 2024-07-02 08:44:14.228 [INFO][3414] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.271302 env[1144]: 2024-07-02 08:44:14.229 [INFO][3414] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0", GenerateName:"calico-kube-controllers-55d59c95b7-", Namespace:"calico-system", SelfLink:"", UID:"dae90b65-e893-4ded-baf6-af0e87f2ead0", ResourceVersion:"749", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55d59c95b7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0", Pod:"calico-kube-controllers-55d59c95b7-p6hg8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.106.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali548d7bbfdfd", MAC:"62:99:4d:fe:33:cf", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:14.271302 env[1144]: 2024-07-02 08:44:14.264 [INFO][3414] k8s.go 500: Wrote updated endpoint to datastore ContainerID="84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0" Namespace="calico-system" Pod="calico-kube-controllers-55d59c95b7-p6hg8" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:14.297575 env[1144]: time="2024-07-02T08:44:14.297338526Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:44:14.297575 env[1144]: time="2024-07-02T08:44:14.297387208Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:44:14.297575 env[1144]: time="2024-07-02T08:44:14.297400023Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:44:14.297784 env[1144]: time="2024-07-02T08:44:14.297570630Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0 pid=3629 runtime=io.containerd.runc.v2 Jul 2 08:44:14.305000 audit[3540]: NETFILTER_CFG table=filter:102 family=2 entries=69 op=nft_register_chain pid=3540 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:14.305000 audit[3540]: SYSCALL arch=c000003e syscall=46 success=yes exit=36404 a0=3 a1=7ffe48534b30 a2=0 a3=7ffe48534b1c items=0 ppid=3103 pid=3540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.305000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:14.309727 systemd-networkd[969]: cali41efc422ae7: Gained IPv6LL Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.330000 audit: BPF prog-id=154 op=LOAD Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.332000 audit: BPF prog-id=155 op=LOAD Jul 2 08:44:14.333000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3533 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613836623830326233633634353765653638316537313364343266 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3533 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613836623830326233633634353765653638316537313364343266 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.333000 audit: BPF prog-id=156 op=LOAD Jul 2 08:44:14.333000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00020e7c0 items=0 ppid=3533 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613836623830326233633634353765653638316537313364343266 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit: BPF prog-id=157 op=LOAD Jul 2 08:44:14.334000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00020e808 items=0 ppid=3533 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613836623830326233633634353765653638316537313364343266 Jul 2 08:44:14.334000 audit: BPF prog-id=157 op=UNLOAD Jul 2 08:44:14.334000 audit: BPF prog-id=156 op=UNLOAD Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { perfmon } for pid=3547 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit[3547]: AVC avc: denied { bpf } for pid=3547 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.334000 audit: BPF prog-id=158 op=LOAD Jul 2 08:44:14.334000 audit[3547]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00020ec18 items=0 ppid=3533 pid=3547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732613836623830326233633634353765653638316537313364343266 Jul 2 08:44:14.333000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3574 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962643063643465373564336338643130636562306430303233336633 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3574 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962643063643465373564336338643130636562306430303233336633 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.342000 audit: BPF prog-id=159 op=LOAD Jul 2 08:44:14.345262 systemd[1]: Started cri-containerd-84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0.scope. Jul 2 08:44:14.342000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000025dd0 items=0 ppid=3574 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962643063643465373564336338643130636562306430303233336633 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.346000 audit: BPF prog-id=160 op=LOAD Jul 2 08:44:14.346000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00021c2e8 items=0 ppid=3574 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962643063643465373564336338643130636562306430303233336633 Jul 2 08:44:14.347000 audit: BPF prog-id=160 op=UNLOAD Jul 2 08:44:14.347000 audit: BPF prog-id=159 op=UNLOAD Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.350000 audit: BPF prog-id=161 op=LOAD Jul 2 08:44:14.350000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00021c6f8 items=0 ppid=3574 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962643063643465373564336338643130636562306430303233336633 Jul 2 08:44:14.385501 env[1144]: time="2024-07-02T08:44:14.385452754Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-sn5vm,Uid:2aad6adf-392f-4668-97c8-f175bdff4c5b,Namespace:calico-system,Attempt:1,} returns sandbox id \"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f\"" Jul 2 08:44:14.392741 env[1144]: time="2024-07-02T08:44:14.392693270Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 08:44:14.433389 env[1144]: time="2024-07-02T08:44:14.431441424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7db6d8ff4d-lh9pg,Uid:938f05b6-6c93-4b42-a603-a22da6a5dfc3,Namespace:kube-system,Attempt:1,} returns sandbox id \"9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397\"" Jul 2 08:44:14.471077 env[1144]: time="2024-07-02T08:44:14.471010438Z" level=info msg="CreateContainer within sandbox \"9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.488000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.488000 audit: BPF prog-id=162 op=LOAD Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3629 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834646532656132323936373835313936613562646635656565373238 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3629 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834646532656132323936373835313936613562646635656565373238 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit: BPF prog-id=163 op=LOAD Jul 2 08:44:14.494000 audit[3639]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000349ce0 items=0 ppid=3629 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834646532656132323936373835313936613562646635656565373238 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.494000 audit: BPF prog-id=164 op=LOAD Jul 2 08:44:14.494000 audit[3639]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000349d28 items=0 ppid=3629 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834646532656132323936373835313936613562646635656565373238 Jul 2 08:44:14.494000 audit: BPF prog-id=164 op=UNLOAD Jul 2 08:44:14.494000 audit: BPF prog-id=163 op=UNLOAD Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { perfmon } for pid=3639 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit[3639]: AVC avc: denied { bpf } for pid=3639 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.495000 audit: BPF prog-id=165 op=LOAD Jul 2 08:44:14.495000 audit[3639]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d0138 items=0 ppid=3629 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834646532656132323936373835313936613562646635656565373238 Jul 2 08:44:14.533029 env[1144]: time="2024-07-02T08:44:14.532977596Z" level=info msg="CreateContainer within sandbox \"9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e800ab6525cdf1006bef1b722623606ff6b3255df754504df64067c0ee35d69f\"" Jul 2 08:44:14.533796 env[1144]: time="2024-07-02T08:44:14.533753703Z" level=info msg="StartContainer for \"e800ab6525cdf1006bef1b722623606ff6b3255df754504df64067c0ee35d69f\"" Jul 2 08:44:14.573233 systemd[1]: Started cri-containerd-e800ab6525cdf1006bef1b722623606ff6b3255df754504df64067c0ee35d69f.scope. Jul 2 08:44:14.598000 audit[3688]: NETFILTER_CFG table=filter:103 family=2 entries=86 op=nft_register_chain pid=3688 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:14.598000 audit[3688]: SYSCALL arch=c000003e syscall=46 success=yes exit=50208 a0=3 a1=7ffd4f65da60 a2=0 a3=7ffd4f65da4c items=0 ppid=3103 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.598000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.628000 audit: BPF prog-id=166 op=LOAD Jul 2 08:44:14.632170 env[1144]: time="2024-07-02T08:44:14.632115436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55d59c95b7-p6hg8,Uid:dae90b65-e893-4ded-baf6-af0e87f2ead0,Namespace:calico-system,Attempt:1,} returns sandbox id \"84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0\"" Jul 2 08:44:14.632000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.632000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3574 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303061623635323563646631303036626566316237323236323336 Jul 2 08:44:14.633000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.633000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3574 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303061623635323563646631303036626566316237323236323336 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.634000 audit: BPF prog-id=167 op=LOAD Jul 2 08:44:14.634000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000fbde0 items=0 ppid=3574 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303061623635323563646631303036626566316237323236323336 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.639000 audit: BPF prog-id=168 op=LOAD Jul 2 08:44:14.639000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000fbe28 items=0 ppid=3574 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303061623635323563646631303036626566316237323236323336 Jul 2 08:44:14.642000 audit: BPF prog-id=168 op=UNLOAD Jul 2 08:44:14.642000 audit: BPF prog-id=167 op=UNLOAD Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { perfmon } for pid=3679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit[3679]: AVC avc: denied { bpf } for pid=3679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:14.642000 audit: BPF prog-id=169 op=LOAD Jul 2 08:44:14.642000 audit[3679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00033c238 items=0 ppid=3574 pid=3679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538303061623635323563646631303036626566316237323236323336 Jul 2 08:44:14.663000 audit[3703]: NETFILTER_CFG table=filter:104 family=2 entries=11 op=nft_register_rule pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:14.663000 audit[3703]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffd457e8b70 a2=0 a3=7ffd457e8b5c items=0 ppid=2179 pid=3703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:14.666000 audit[3703]: NETFILTER_CFG table=nat:105 family=2 entries=35 op=nft_register_chain pid=3703 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:14.666000 audit[3703]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd457e8b70 a2=0 a3=7ffd457e8b5c items=0 ppid=2179 pid=3703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:14.666000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:14.678997 env[1144]: time="2024-07-02T08:44:14.678937471Z" level=info msg="StartContainer for \"e800ab6525cdf1006bef1b722623606ff6b3255df754504df64067c0ee35d69f\" returns successfully" Jul 2 08:44:15.013645 systemd-networkd[969]: vxlan.calico: Gained IPv6LL Jul 2 08:44:15.270681 systemd-networkd[969]: califa632be7ae5: Gained IPv6LL Jul 2 08:44:15.526697 systemd-networkd[969]: calie561b42eef9: Gained IPv6LL Jul 2 08:44:15.572908 kernel: kauditd_printk_skb: 516 callbacks suppressed Jul 2 08:44:15.573036 kernel: audit: type=1325 audit(1719909855.568:1088): table=filter:106 family=2 entries=8 op=nft_register_rule pid=3718 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:15.568000 audit[3718]: NETFILTER_CFG table=filter:106 family=2 entries=8 op=nft_register_rule pid=3718 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:15.568000 audit[3718]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe52be9390 a2=0 a3=7ffe52be937c items=0 ppid=2179 pid=3718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:15.579492 kernel: audit: type=1300 audit(1719909855.568:1088): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe52be9390 a2=0 a3=7ffe52be937c items=0 ppid=2179 pid=3718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:15.579970 kubelet[2000]: I0702 08:44:15.579899 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7db6d8ff4d-lh9pg" podStartSLOduration=41.579862838 podStartE2EDuration="41.579862838s" podCreationTimestamp="2024-07-02 08:43:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 08:44:15.55212684 +0000 UTC m=+53.599536541" watchObservedRunningTime="2024-07-02 08:44:15.579862838 +0000 UTC m=+53.627272539" Jul 2 08:44:15.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:15.586494 kernel: audit: type=1327 audit(1719909855.568:1088): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:15.592000 audit[3718]: NETFILTER_CFG table=nat:107 family=2 entries=44 op=nft_register_rule pid=3718 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:15.592000 audit[3718]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe52be9390 a2=0 a3=7ffe52be937c items=0 ppid=2179 pid=3718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:15.601667 kernel: audit: type=1325 audit(1719909855.592:1089): table=nat:107 family=2 entries=44 op=nft_register_rule pid=3718 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:15.601795 kernel: audit: type=1300 audit(1719909855.592:1089): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe52be9390 a2=0 a3=7ffe52be937c items=0 ppid=2179 pid=3718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:15.601858 kernel: audit: type=1327 audit(1719909855.592:1089): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:15.592000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:15.973905 systemd-networkd[969]: cali548d7bbfdfd: Gained IPv6LL Jul 2 08:44:16.179000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:16.191589 kernel: audit: type=1400 audit(1719909856.179:1090): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:16.179000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d7a180 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:16.179000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:16.209031 kernel: audit: type=1300 audit(1719909856.179:1090): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d7a180 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:16.209158 kernel: audit: type=1327 audit(1719909856.179:1090): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:16.179000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:16.216563 kernel: audit: type=1400 audit(1719909856.179:1091): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:16.179000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000c5a8e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:16.179000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:16.663000 audit[3720]: NETFILTER_CFG table=filter:108 family=2 entries=8 op=nft_register_rule pid=3720 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:16.663000 audit[3720]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffc76813280 a2=0 a3=7ffc7681326c items=0 ppid=2179 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:16.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:16.688000 audit[3720]: NETFILTER_CFG table=nat:109 family=2 entries=56 op=nft_register_chain pid=3720 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:16.688000 audit[3720]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc76813280 a2=0 a3=7ffc7681326c items=0 ppid=2179 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:16.688000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:16.726634 env[1144]: time="2024-07-02T08:44:16.726517161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:16.730366 env[1144]: time="2024-07-02T08:44:16.730298864Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:16.732693 env[1144]: time="2024-07-02T08:44:16.732619972Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:16.734818 env[1144]: time="2024-07-02T08:44:16.734759473Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:16.735641 env[1144]: time="2024-07-02T08:44:16.735580464Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de\"" Jul 2 08:44:16.738435 env[1144]: time="2024-07-02T08:44:16.738408882Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 08:44:16.739934 env[1144]: time="2024-07-02T08:44:16.739891197Z" level=info msg="CreateContainer within sandbox \"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 08:44:16.777775 env[1144]: time="2024-07-02T08:44:16.777678611Z" level=info msg="CreateContainer within sandbox \"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"7b42b7ce7dc7db06df396256c9726ec16703fa3274711788017e4e92ca544b14\"" Jul 2 08:44:16.778887 env[1144]: time="2024-07-02T08:44:16.778843228Z" level=info msg="StartContainer for \"7b42b7ce7dc7db06df396256c9726ec16703fa3274711788017e4e92ca544b14\"" Jul 2 08:44:16.821863 systemd[1]: Started cri-containerd-7b42b7ce7dc7db06df396256c9726ec16703fa3274711788017e4e92ca544b14.scope. Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00019f6b0 a2=3c a3=7f4705b54688 items=0 ppid=3533 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:16.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343262376365376463376462303664663339363235366339373236 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.853000 audit: BPF prog-id=170 op=LOAD Jul 2 08:44:16.853000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019f9d8 a2=78 a3=c0002927e8 items=0 ppid=3533 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:16.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343262376365376463376462303664663339363235366339373236 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit: BPF prog-id=171 op=LOAD Jul 2 08:44:16.854000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00019f770 a2=78 a3=c000292838 items=0 ppid=3533 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:16.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343262376365376463376462303664663339363235366339373236 Jul 2 08:44:16.854000 audit: BPF prog-id=171 op=UNLOAD Jul 2 08:44:16.854000 audit: BPF prog-id=170 op=UNLOAD Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:16.854000 audit: BPF prog-id=172 op=LOAD Jul 2 08:44:16.854000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00019fc30 a2=78 a3=c0002928c8 items=0 ppid=3533 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:16.854000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762343262376365376463376462303664663339363235366339373236 Jul 2 08:44:16.976491 env[1144]: time="2024-07-02T08:44:16.976422145Z" level=info msg="StartContainer for \"7b42b7ce7dc7db06df396256c9726ec16703fa3274711788017e4e92ca544b14\" returns successfully" Jul 2 08:44:17.015000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:17.015000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:17.015000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c0026e55e0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:44:17.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:44:17.015000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c003d46ff0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:44:17.015000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:44:17.017000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:17.017000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00501a7b0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:44:17.017000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:44:17.023000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:17.023000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c009c18240 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:44:17.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:44:17.024000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:17.024000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c009c18330 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:44:17.024000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:44:17.025000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:17.025000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c0026e5900 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:44:17.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:44:20.310000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:20.310000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c5b420 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:20.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:20.313000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:20.313000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e87a20 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:20.313000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:20.328000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:20.328000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e87a80 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:20.328000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:20.335000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:44:20.335000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e87c20 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:44:20.335000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:44:20.800763 env[1144]: time="2024-07-02T08:44:20.800693844Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:20.806780 env[1144]: time="2024-07-02T08:44:20.806716704Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:21.267913 env[1144]: time="2024-07-02T08:44:21.267802745Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:21.273867 env[1144]: time="2024-07-02T08:44:21.273809206Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:21.278109 env[1144]: time="2024-07-02T08:44:21.276077762Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783\"" Jul 2 08:44:21.284998 env[1144]: time="2024-07-02T08:44:21.284888218Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 08:44:21.344989 env[1144]: time="2024-07-02T08:44:21.344907144Z" level=info msg="CreateContainer within sandbox \"84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 08:44:21.382217 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2934970413.mount: Deactivated successfully. Jul 2 08:44:21.389130 env[1144]: time="2024-07-02T08:44:21.388950643Z" level=info msg="CreateContainer within sandbox \"84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1\"" Jul 2 08:44:21.390377 env[1144]: time="2024-07-02T08:44:21.390276851Z" level=info msg="StartContainer for \"e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1\"" Jul 2 08:44:21.425066 systemd[1]: Started cri-containerd-e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1.scope. Jul 2 08:44:21.445486 kernel: kauditd_printk_skb: 81 callbacks suppressed Jul 2 08:44:21.445665 kernel: audit: type=1400 audit(1719909861.442:1110): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.451956 kernel: audit: type=1400 audit(1719909861.443:1111): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.452016 kernel: audit: type=1400 audit(1719909861.443:1112): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.458600 kernel: audit: type=1400 audit(1719909861.443:1113): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.461959 kernel: audit: type=1400 audit(1719909861.443:1114): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.465348 kernel: audit: type=1400 audit(1719909861.443:1115): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.469002 kernel: audit: type=1400 audit(1719909861.443:1116): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.469046 kernel: audit: type=1400 audit(1719909861.443:1117): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.472347 kernel: audit: type=1400 audit(1719909861.443:1118): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.475529 kernel: audit: type=1400 audit(1719909861.447:1119): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit: BPF prog-id=173 op=LOAD Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3629 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653635353932623233663761303366313231666264636135616661 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3629 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653635353932623233663761303366313231666264636135616661 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.447000 audit: BPF prog-id=174 op=LOAD Jul 2 08:44:21.447000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00034dd10 items=0 ppid=3629 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:21.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653635353932623233663761303366313231666264636135616661 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.453000 audit: BPF prog-id=175 op=LOAD Jul 2 08:44:21.453000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00034dd58 items=0 ppid=3629 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:21.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653635353932623233663761303366313231666264636135616661 Jul 2 08:44:21.457000 audit: BPF prog-id=175 op=UNLOAD Jul 2 08:44:21.457000 audit: BPF prog-id=174 op=UNLOAD Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:21.457000 audit: BPF prog-id=176 op=LOAD Jul 2 08:44:21.457000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003b4168 items=0 ppid=3629 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:21.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536653635353932623233663761303366313231666264636135616661 Jul 2 08:44:21.514988 env[1144]: time="2024-07-02T08:44:21.514907529Z" level=info msg="StartContainer for \"e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1\" returns successfully" Jul 2 08:44:21.705008 kubelet[2000]: I0702 08:44:21.704926 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-55d59c95b7-p6hg8" podStartSLOduration=33.058573893 podStartE2EDuration="39.704902733s" podCreationTimestamp="2024-07-02 08:43:42 +0000 UTC" firstStartedPulling="2024-07-02 08:44:14.634204847 +0000 UTC m=+52.681614538" lastFinishedPulling="2024-07-02 08:44:21.280533636 +0000 UTC m=+59.327943378" observedRunningTime="2024-07-02 08:44:21.581852779 +0000 UTC m=+59.629262480" watchObservedRunningTime="2024-07-02 08:44:21.704902733 +0000 UTC m=+59.752312444" Jul 2 08:44:22.275171 env[1144]: time="2024-07-02T08:44:22.274923912Z" level=info msg="StopPodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\"" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.384 [WARNING][3838] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"938f05b6-6c93-4b42-a603-a22da6a5dfc3", ResourceVersion:"784", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397", Pod:"coredns-7db6d8ff4d-lh9pg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie561b42eef9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.385 [INFO][3838] k8s.go 608: Cleaning up netns ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.385 [INFO][3838] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" iface="eth0" netns="" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.385 [INFO][3838] k8s.go 615: Releasing IP address(es) ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.385 [INFO][3838] utils.go 188: Calico CNI releasing IP address ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.418 [INFO][3844] ipam_plugin.go 411: Releasing address using handleID ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.418 [INFO][3844] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.418 [INFO][3844] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.427 [WARNING][3844] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.427 [INFO][3844] ipam_plugin.go 439: Releasing address using workloadID ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.429 [INFO][3844] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.432432 env[1144]: 2024-07-02 08:44:22.431 [INFO][3838] k8s.go 621: Teardown processing complete. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.434227 env[1144]: time="2024-07-02T08:44:22.432490363Z" level=info msg="TearDown network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" successfully" Jul 2 08:44:22.434227 env[1144]: time="2024-07-02T08:44:22.432530860Z" level=info msg="StopPodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" returns successfully" Jul 2 08:44:22.440324 env[1144]: time="2024-07-02T08:44:22.440276869Z" level=info msg="RemovePodSandbox for \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\"" Jul 2 08:44:22.440418 env[1144]: time="2024-07-02T08:44:22.440321545Z" level=info msg="Forcibly stopping sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\"" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.484 [WARNING][3864] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"938f05b6-6c93-4b42-a603-a22da6a5dfc3", ResourceVersion:"784", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"9bd0cd4e75d3c8d10ceb0d00233f3e9565ae34b8b9ee4d90b965b79c9b8f7397", Pod:"coredns-7db6d8ff4d-lh9pg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calie561b42eef9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.484 [INFO][3864] k8s.go 608: Cleaning up netns ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.484 [INFO][3864] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" iface="eth0" netns="" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.484 [INFO][3864] k8s.go 615: Releasing IP address(es) ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.484 [INFO][3864] utils.go 188: Calico CNI releasing IP address ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.511 [INFO][3870] ipam_plugin.go 411: Releasing address using handleID ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.511 [INFO][3870] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.511 [INFO][3870] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.518 [WARNING][3870] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.518 [INFO][3870] ipam_plugin.go 439: Releasing address using workloadID ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" HandleID="k8s-pod-network.4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--lh9pg-eth0" Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.520 [INFO][3870] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.522646 env[1144]: 2024-07-02 08:44:22.521 [INFO][3864] k8s.go 621: Teardown processing complete. ContainerID="4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c" Jul 2 08:44:22.523260 env[1144]: time="2024-07-02T08:44:22.523215613Z" level=info msg="TearDown network for sandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" successfully" Jul 2 08:44:22.529727 env[1144]: time="2024-07-02T08:44:22.529641977Z" level=info msg="RemovePodSandbox \"4f7e97901debdbf771d4580b6e809e68f55450eeddf20aeea2a104f3dfadda5c\" returns successfully" Jul 2 08:44:22.531237 env[1144]: time="2024-07-02T08:44:22.531188124Z" level=info msg="StopPodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\"" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.572 [WARNING][3890] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0", GenerateName:"calico-kube-controllers-55d59c95b7-", Namespace:"calico-system", SelfLink:"", UID:"dae90b65-e893-4ded-baf6-af0e87f2ead0", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55d59c95b7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0", Pod:"calico-kube-controllers-55d59c95b7-p6hg8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.106.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali548d7bbfdfd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.572 [INFO][3890] k8s.go 608: Cleaning up netns ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.572 [INFO][3890] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" iface="eth0" netns="" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.572 [INFO][3890] k8s.go 615: Releasing IP address(es) ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.573 [INFO][3890] utils.go 188: Calico CNI releasing IP address ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.599 [INFO][3896] ipam_plugin.go 411: Releasing address using handleID ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.599 [INFO][3896] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.599 [INFO][3896] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.607 [WARNING][3896] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.607 [INFO][3896] ipam_plugin.go 439: Releasing address using workloadID ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.612 [INFO][3896] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.616197 env[1144]: 2024-07-02 08:44:22.614 [INFO][3890] k8s.go 621: Teardown processing complete. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.616884 env[1144]: time="2024-07-02T08:44:22.616231837Z" level=info msg="TearDown network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" successfully" Jul 2 08:44:22.616884 env[1144]: time="2024-07-02T08:44:22.616271514Z" level=info msg="StopPodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" returns successfully" Jul 2 08:44:22.617481 env[1144]: time="2024-07-02T08:44:22.617434279Z" level=info msg="RemovePodSandbox for \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\"" Jul 2 08:44:22.617592 env[1144]: time="2024-07-02T08:44:22.617555029Z" level=info msg="Forcibly stopping sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\"" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.665 [WARNING][3914] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0", GenerateName:"calico-kube-controllers-55d59c95b7-", Namespace:"calico-system", SelfLink:"", UID:"dae90b65-e893-4ded-baf6-af0e87f2ead0", ResourceVersion:"813", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55d59c95b7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"84de2ea2296785196a5bdf5eee7286598c716e693187e8743b1d69b95f5316a0", Pod:"calico-kube-controllers-55d59c95b7-p6hg8", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.106.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali548d7bbfdfd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.665 [INFO][3914] k8s.go 608: Cleaning up netns ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.665 [INFO][3914] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" iface="eth0" netns="" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.665 [INFO][3914] k8s.go 615: Releasing IP address(es) ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.665 [INFO][3914] utils.go 188: Calico CNI releasing IP address ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.697 [INFO][3920] ipam_plugin.go 411: Releasing address using handleID ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.698 [INFO][3920] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.698 [INFO][3920] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.705 [WARNING][3920] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.705 [INFO][3920] ipam_plugin.go 439: Releasing address using workloadID ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" HandleID="k8s-pod-network.3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--kube--controllers--55d59c95b7--p6hg8-eth0" Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.707 [INFO][3920] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.709935 env[1144]: 2024-07-02 08:44:22.708 [INFO][3914] k8s.go 621: Teardown processing complete. ContainerID="3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1" Jul 2 08:44:22.710568 env[1144]: time="2024-07-02T08:44:22.710537280Z" level=info msg="TearDown network for sandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" successfully" Jul 2 08:44:22.714429 env[1144]: time="2024-07-02T08:44:22.714393136Z" level=info msg="RemovePodSandbox \"3902f1ff7d7253a6d9668b2829c7d3841694f42516daaac77c08a00582629fd1\" returns successfully" Jul 2 08:44:22.715169 env[1144]: time="2024-07-02T08:44:22.715121765Z" level=info msg="StopPodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\"" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.759 [WARNING][3938] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2aad6adf-392f-4668-97c8-f175bdff4c5b", ResourceVersion:"759", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6cc9df58f4", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f", Pod:"csi-node-driver-sn5vm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.106.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa632be7ae5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.759 [INFO][3938] k8s.go 608: Cleaning up netns ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.759 [INFO][3938] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" iface="eth0" netns="" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.759 [INFO][3938] k8s.go 615: Releasing IP address(es) ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.759 [INFO][3938] utils.go 188: Calico CNI releasing IP address ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.783 [INFO][3944] ipam_plugin.go 411: Releasing address using handleID ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.783 [INFO][3944] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.783 [INFO][3944] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.792 [WARNING][3944] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.792 [INFO][3944] ipam_plugin.go 439: Releasing address using workloadID ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.795 [INFO][3944] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.799100 env[1144]: 2024-07-02 08:44:22.797 [INFO][3938] k8s.go 621: Teardown processing complete. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.800746 env[1144]: time="2024-07-02T08:44:22.799077346Z" level=info msg="TearDown network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" successfully" Jul 2 08:44:22.800746 env[1144]: time="2024-07-02T08:44:22.800517249Z" level=info msg="StopPodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" returns successfully" Jul 2 08:44:22.801291 env[1144]: time="2024-07-02T08:44:22.801225779Z" level=info msg="RemovePodSandbox for \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\"" Jul 2 08:44:22.801291 env[1144]: time="2024-07-02T08:44:22.801263290Z" level=info msg="Forcibly stopping sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\"" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.843 [WARNING][3965] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"2aad6adf-392f-4668-97c8-f175bdff4c5b", ResourceVersion:"759", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"6cc9df58f4", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f", Pod:"csi-node-driver-sn5vm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.106.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califa632be7ae5", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.843 [INFO][3965] k8s.go 608: Cleaning up netns ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.843 [INFO][3965] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" iface="eth0" netns="" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.843 [INFO][3965] k8s.go 615: Releasing IP address(es) ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.843 [INFO][3965] utils.go 188: Calico CNI releasing IP address ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.886 [INFO][3971] ipam_plugin.go 411: Releasing address using handleID ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.886 [INFO][3971] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.887 [INFO][3971] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.894 [WARNING][3971] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.894 [INFO][3971] ipam_plugin.go 439: Releasing address using workloadID ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" HandleID="k8s-pod-network.278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-csi--node--driver--sn5vm-eth0" Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.895 [INFO][3971] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.898777 env[1144]: 2024-07-02 08:44:22.897 [INFO][3965] k8s.go 621: Teardown processing complete. ContainerID="278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33" Jul 2 08:44:22.899351 env[1144]: time="2024-07-02T08:44:22.899320481Z" level=info msg="TearDown network for sandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" successfully" Jul 2 08:44:22.903364 env[1144]: time="2024-07-02T08:44:22.903337436Z" level=info msg="RemovePodSandbox \"278e23643f3db50d66938cbef62df6d2e5f497c2160cef71d0d9a66befbe5c33\" returns successfully" Jul 2 08:44:22.904178 env[1144]: time="2024-07-02T08:44:22.904129815Z" level=info msg="StopPodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\"" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.948 [WARNING][3990] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"9dae8282-fb5c-45e8-8caf-f74546be249b", ResourceVersion:"772", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3", Pod:"coredns-7db6d8ff4d-p2lt8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali41efc422ae7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.948 [INFO][3990] k8s.go 608: Cleaning up netns ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.948 [INFO][3990] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" iface="eth0" netns="" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.948 [INFO][3990] k8s.go 615: Releasing IP address(es) ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.948 [INFO][3990] utils.go 188: Calico CNI releasing IP address ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.977 [INFO][3996] ipam_plugin.go 411: Releasing address using handleID ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.978 [INFO][3996] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.978 [INFO][3996] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.985 [WARNING][3996] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.985 [INFO][3996] ipam_plugin.go 439: Releasing address using workloadID ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.987 [INFO][3996] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:22.990683 env[1144]: 2024-07-02 08:44:22.989 [INFO][3990] k8s.go 621: Teardown processing complete. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:22.991288 env[1144]: time="2024-07-02T08:44:22.991256117Z" level=info msg="TearDown network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" successfully" Jul 2 08:44:22.991369 env[1144]: time="2024-07-02T08:44:22.991349816Z" level=info msg="StopPodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" returns successfully" Jul 2 08:44:22.992027 env[1144]: time="2024-07-02T08:44:22.992006948Z" level=info msg="RemovePodSandbox for \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\"" Jul 2 08:44:22.992143 env[1144]: time="2024-07-02T08:44:22.992105877Z" level=info msg="Forcibly stopping sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\"" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.035 [WARNING][4014] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0", GenerateName:"coredns-7db6d8ff4d-", Namespace:"kube-system", SelfLink:"", UID:"9dae8282-fb5c-45e8-8caf-f74546be249b", ResourceVersion:"772", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 43, 34, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7db6d8ff4d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"8ce15f7894ca5b98da0dc82efbda9c310bc1f4a79addc894c2b53f83dc71d8d3", Pod:"coredns-7db6d8ff4d-p2lt8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.106.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali41efc422ae7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.035 [INFO][4014] k8s.go 608: Cleaning up netns ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.035 [INFO][4014] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" iface="eth0" netns="" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.035 [INFO][4014] k8s.go 615: Releasing IP address(es) ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.035 [INFO][4014] utils.go 188: Calico CNI releasing IP address ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.061 [INFO][4020] ipam_plugin.go 411: Releasing address using handleID ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.061 [INFO][4020] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.061 [INFO][4020] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.071 [WARNING][4020] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.071 [INFO][4020] ipam_plugin.go 439: Releasing address using workloadID ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" HandleID="k8s-pod-network.1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-coredns--7db6d8ff4d--p2lt8-eth0" Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.074 [INFO][4020] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:23.077862 env[1144]: 2024-07-02 08:44:23.076 [INFO][4014] k8s.go 621: Teardown processing complete. ContainerID="1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a" Jul 2 08:44:23.079661 env[1144]: time="2024-07-02T08:44:23.077764754Z" level=info msg="TearDown network for sandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" successfully" Jul 2 08:44:23.083040 env[1144]: time="2024-07-02T08:44:23.083006997Z" level=info msg="RemovePodSandbox \"1e3c46c60333e0493afc17e6c918fc93e8217810492addccb9442e44b6f2e52a\" returns successfully" Jul 2 08:44:24.538556 env[1144]: time="2024-07-02T08:44:24.538248790Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:24.541505 env[1144]: time="2024-07-02T08:44:24.541388827Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:24.544017 env[1144]: time="2024-07-02T08:44:24.543977413Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:24.546880 env[1144]: time="2024-07-02T08:44:24.546599555Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:24.547403 env[1144]: time="2024-07-02T08:44:24.547312572Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020\"" Jul 2 08:44:24.554162 env[1144]: time="2024-07-02T08:44:24.554067659Z" level=info msg="CreateContainer within sandbox \"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 08:44:24.572534 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1415379181.mount: Deactivated successfully. Jul 2 08:44:24.583036 env[1144]: time="2024-07-02T08:44:24.582960955Z" level=info msg="CreateContainer within sandbox \"72a86b802b3c6457ee681e713d42f6876e2f43ba35a4b58f181740c68df82a7f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"09d327405adb237148273771190796982ace0943a152ac1008413c18ff30597e\"" Jul 2 08:44:24.586734 env[1144]: time="2024-07-02T08:44:24.584314010Z" level=info msg="StartContainer for \"09d327405adb237148273771190796982ace0943a152ac1008413c18ff30597e\"" Jul 2 08:44:24.617295 systemd[1]: Started cri-containerd-09d327405adb237148273771190796982ace0943a152ac1008413c18ff30597e.scope. Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f1894738688 items=0 ppid=3533 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:24.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643332373430356164623233373134383237333737313139303739 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.664000 audit: BPF prog-id=177 op=LOAD Jul 2 08:44:24.664000 audit[4045]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c000200218 items=0 ppid=3533 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:24.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643332373430356164623233373134383237333737313139303739 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit: BPF prog-id=178 op=LOAD Jul 2 08:44:24.666000 audit[4045]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c000200268 items=0 ppid=3533 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:24.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643332373430356164623233373134383237333737313139303739 Jul 2 08:44:24.666000 audit: BPF prog-id=178 op=UNLOAD Jul 2 08:44:24.666000 audit: BPF prog-id=177 op=UNLOAD Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { perfmon } for pid=4045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit[4045]: AVC avc: denied { bpf } for pid=4045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:24.666000 audit: BPF prog-id=179 op=LOAD Jul 2 08:44:24.666000 audit[4045]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0002002f8 items=0 ppid=3533 pid=4045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:24.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039643332373430356164623233373134383237333737313139303739 Jul 2 08:44:24.796690 env[1144]: time="2024-07-02T08:44:24.796609880Z" level=info msg="StartContainer for \"09d327405adb237148273771190796982ace0943a152ac1008413c18ff30597e\" returns successfully" Jul 2 08:44:25.509334 kubelet[2000]: I0702 08:44:25.509250 2000 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 08:44:25.509334 kubelet[2000]: I0702 08:44:25.509329 2000 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 08:44:25.572120 systemd[1]: run-containerd-runc-k8s.io-09d327405adb237148273771190796982ace0943a152ac1008413c18ff30597e-runc.sYx87S.mount: Deactivated successfully. Jul 2 08:44:25.630783 kubelet[2000]: I0702 08:44:25.630611 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-sn5vm" podStartSLOduration=33.467707254 podStartE2EDuration="43.630539786s" podCreationTimestamp="2024-07-02 08:43:42 +0000 UTC" firstStartedPulling="2024-07-02 08:44:14.387744854 +0000 UTC m=+52.435154545" lastFinishedPulling="2024-07-02 08:44:24.550577386 +0000 UTC m=+62.597987077" observedRunningTime="2024-07-02 08:44:25.627684945 +0000 UTC m=+63.675094766" watchObservedRunningTime="2024-07-02 08:44:25.630539786 +0000 UTC m=+63.677949557" Jul 2 08:44:26.631311 kernel: kauditd_printk_skb: 90 callbacks suppressed Jul 2 08:44:26.631480 kernel: audit: type=1325 audit(1719909866.625:1134): table=filter:110 family=2 entries=9 op=nft_register_rule pid=4078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.625000 audit[4078]: NETFILTER_CFG table=filter:110 family=2 entries=9 op=nft_register_rule pid=4078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.625000 audit[4078]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc893e2e30 a2=0 a3=7ffc893e2e1c items=0 ppid=2179 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.638825 kernel: audit: type=1300 audit(1719909866.625:1134): arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc893e2e30 a2=0 a3=7ffc893e2e1c items=0 ppid=2179 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.657416 kernel: audit: type=1327 audit(1719909866.625:1134): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.657502 kernel: audit: type=1325 audit(1719909866.650:1135): table=nat:111 family=2 entries=20 op=nft_register_rule pid=4078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.650000 audit[4078]: NETFILTER_CFG table=nat:111 family=2 entries=20 op=nft_register_rule pid=4078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.650000 audit[4078]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc893e2e30 a2=0 a3=7ffc893e2e1c items=0 ppid=2179 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.666490 kernel: audit: type=1300 audit(1719909866.650:1135): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc893e2e30 a2=0 a3=7ffc893e2e1c items=0 ppid=2179 pid=4078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.650000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.671494 kernel: audit: type=1327 audit(1719909866.650:1135): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.682000 audit[4080]: NETFILTER_CFG table=filter:112 family=2 entries=10 op=nft_register_rule pid=4080 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.687500 kernel: audit: type=1325 audit(1719909866.682:1136): table=filter:112 family=2 entries=10 op=nft_register_rule pid=4080 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.682000 audit[4080]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fffe68fdeb0 a2=0 a3=7fffe68fde9c items=0 ppid=2179 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.694495 kernel: audit: type=1300 audit(1719909866.682:1136): arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fffe68fdeb0 a2=0 a3=7fffe68fde9c items=0 ppid=2179 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.682000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.698489 kernel: audit: type=1327 audit(1719909866.682:1136): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.693000 audit[4080]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=4080 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.693000 audit[4080]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffe68fdeb0 a2=0 a3=7fffe68fde9c items=0 ppid=2179 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:26.693000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:26.702487 kernel: audit: type=1325 audit(1719909866.693:1137): table=nat:113 family=2 entries=20 op=nft_register_rule pid=4080 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:26.733497 kubelet[2000]: I0702 08:44:26.733420 2000 topology_manager.go:215] "Topology Admit Handler" podUID="58268b85-4675-4d8b-84e3-f66b9a077cc6" podNamespace="calico-apiserver" podName="calico-apiserver-7d7757c8fb-vb4kr" Jul 2 08:44:26.736180 kubelet[2000]: I0702 08:44:26.736152 2000 topology_manager.go:215] "Topology Admit Handler" podUID="33a23c5f-9689-4d34-9163-cd9be561a4b1" podNamespace="calico-apiserver" podName="calico-apiserver-7d7757c8fb-ftnj9" Jul 2 08:44:26.747237 systemd[1]: Created slice kubepods-besteffort-pod33a23c5f_9689_4d34_9163_cd9be561a4b1.slice. Jul 2 08:44:26.751001 systemd[1]: Created slice kubepods-besteffort-pod58268b85_4675_4d8b_84e3_f66b9a077cc6.slice. Jul 2 08:44:26.861769 kubelet[2000]: I0702 08:44:26.861711 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/33a23c5f-9689-4d34-9163-cd9be561a4b1-calico-apiserver-certs\") pod \"calico-apiserver-7d7757c8fb-ftnj9\" (UID: \"33a23c5f-9689-4d34-9163-cd9be561a4b1\") " pod="calico-apiserver/calico-apiserver-7d7757c8fb-ftnj9" Jul 2 08:44:26.861769 kubelet[2000]: I0702 08:44:26.861772 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dmj25\" (UniqueName: \"kubernetes.io/projected/58268b85-4675-4d8b-84e3-f66b9a077cc6-kube-api-access-dmj25\") pod \"calico-apiserver-7d7757c8fb-vb4kr\" (UID: \"58268b85-4675-4d8b-84e3-f66b9a077cc6\") " pod="calico-apiserver/calico-apiserver-7d7757c8fb-vb4kr" Jul 2 08:44:26.861989 kubelet[2000]: I0702 08:44:26.861798 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hjqkh\" (UniqueName: \"kubernetes.io/projected/33a23c5f-9689-4d34-9163-cd9be561a4b1-kube-api-access-hjqkh\") pod \"calico-apiserver-7d7757c8fb-ftnj9\" (UID: \"33a23c5f-9689-4d34-9163-cd9be561a4b1\") " pod="calico-apiserver/calico-apiserver-7d7757c8fb-ftnj9" Jul 2 08:44:26.861989 kubelet[2000]: I0702 08:44:26.861837 2000 reconciler_common.go:247] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/58268b85-4675-4d8b-84e3-f66b9a077cc6-calico-apiserver-certs\") pod \"calico-apiserver-7d7757c8fb-vb4kr\" (UID: \"58268b85-4675-4d8b-84e3-f66b9a077cc6\") " pod="calico-apiserver/calico-apiserver-7d7757c8fb-vb4kr" Jul 2 08:44:27.051796 env[1144]: time="2024-07-02T08:44:27.051255526Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d7757c8fb-ftnj9,Uid:33a23c5f-9689-4d34-9163-cd9be561a4b1,Namespace:calico-apiserver,Attempt:0,}" Jul 2 08:44:27.054643 env[1144]: time="2024-07-02T08:44:27.054602046Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d7757c8fb-vb4kr,Uid:58268b85-4675-4d8b-84e3-f66b9a077cc6,Namespace:calico-apiserver,Attempt:0,}" Jul 2 08:44:27.266212 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 08:44:27.266566 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali94c2692aefa: link becomes ready Jul 2 08:44:27.262993 systemd-networkd[969]: cali94c2692aefa: Link UP Jul 2 08:44:27.266249 systemd-networkd[969]: cali94c2692aefa: Gained carrier Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.138 [INFO][4087] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0 calico-apiserver-7d7757c8fb- calico-apiserver 58268b85-4675-4d8b-84e3-f66b9a077cc6 879 0 2024-07-02 08:44:26 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7d7757c8fb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-5-1-a8b80a6678.novalocal calico-apiserver-7d7757c8fb-vb4kr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali94c2692aefa [] []}} ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.138 [INFO][4087] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.202 [INFO][4109] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" HandleID="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.217 [INFO][4109] ipam_plugin.go 264: Auto assigning IP ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" HandleID="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ef4e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-5-1-a8b80a6678.novalocal", "pod":"calico-apiserver-7d7757c8fb-vb4kr", "timestamp":"2024-07-02 08:44:27.202277772 +0000 UTC"}, Hostname:"ci-3510-3-5-1-a8b80a6678.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.217 [INFO][4109] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.217 [INFO][4109] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.217 [INFO][4109] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-1-a8b80a6678.novalocal' Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.220 [INFO][4109] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.227 [INFO][4109] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.237 [INFO][4109] ipam.go 489: Trying affinity for 192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.240 [INFO][4109] ipam.go 155: Attempting to load block cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.244 [INFO][4109] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.244 [INFO][4109] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.106.0/26 handle="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.246 [INFO][4109] ipam.go 1685: Creating new handle: k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0 Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.251 [INFO][4109] ipam.go 1203: Writing block in order to claim IPs block=192.168.106.0/26 handle="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.258 [INFO][4109] ipam.go 1216: Successfully claimed IPs: [192.168.106.5/26] block=192.168.106.0/26 handle="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.258 [INFO][4109] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.106.5/26] handle="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.258 [INFO][4109] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:27.283112 env[1144]: 2024-07-02 08:44:27.258 [INFO][4109] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.106.5/26] IPv6=[] ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" HandleID="k8s-pod-network.db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.283979 env[1144]: 2024-07-02 08:44:27.260 [INFO][4087] k8s.go 386: Populated endpoint ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0", GenerateName:"calico-apiserver-7d7757c8fb-", Namespace:"calico-apiserver", SelfLink:"", UID:"58268b85-4675-4d8b-84e3-f66b9a077cc6", ResourceVersion:"879", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 44, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d7757c8fb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"", Pod:"calico-apiserver-7d7757c8fb-vb4kr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.106.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali94c2692aefa", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:27.283979 env[1144]: 2024-07-02 08:44:27.261 [INFO][4087] k8s.go 387: Calico CNI using IPs: [192.168.106.5/32] ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.283979 env[1144]: 2024-07-02 08:44:27.261 [INFO][4087] dataplane_linux.go 68: Setting the host side veth name to cali94c2692aefa ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.283979 env[1144]: 2024-07-02 08:44:27.266 [INFO][4087] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.283979 env[1144]: 2024-07-02 08:44:27.266 [INFO][4087] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0", GenerateName:"calico-apiserver-7d7757c8fb-", Namespace:"calico-apiserver", SelfLink:"", UID:"58268b85-4675-4d8b-84e3-f66b9a077cc6", ResourceVersion:"879", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 44, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d7757c8fb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0", Pod:"calico-apiserver-7d7757c8fb-vb4kr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.106.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali94c2692aefa", MAC:"ae:d7:0f:8d:52:d6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:27.283979 env[1144]: 2024-07-02 08:44:27.278 [INFO][4087] k8s.go 500: Wrote updated endpoint to datastore ContainerID="db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-vb4kr" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--vb4kr-eth0" Jul 2 08:44:27.329630 env[1144]: time="2024-07-02T08:44:27.327569907Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:44:27.329630 env[1144]: time="2024-07-02T08:44:27.327624100Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:44:27.329630 env[1144]: time="2024-07-02T08:44:27.327638918Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:44:27.333554 env[1144]: time="2024-07-02T08:44:27.331583766Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0 pid=4140 runtime=io.containerd.runc.v2 Jul 2 08:44:27.347451 systemd-networkd[969]: cali8b4a772211f: Link UP Jul 2 08:44:27.349688 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8b4a772211f: link becomes ready Jul 2 08:44:27.349794 systemd-networkd[969]: cali8b4a772211f: Gained carrier Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.161 [INFO][4086] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0 calico-apiserver-7d7757c8fb- calico-apiserver 33a23c5f-9689-4d34-9163-cd9be561a4b1 878 0 2024-07-02 08:44:26 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7d7757c8fb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-5-1-a8b80a6678.novalocal calico-apiserver-7d7757c8fb-ftnj9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8b4a772211f [] []}} ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.161 [INFO][4086] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.230 [INFO][4113] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" HandleID="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.248 [INFO][4113] ipam_plugin.go 264: Auto assigning IP ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" HandleID="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003122e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-5-1-a8b80a6678.novalocal", "pod":"calico-apiserver-7d7757c8fb-ftnj9", "timestamp":"2024-07-02 08:44:27.230837492 +0000 UTC"}, Hostname:"ci-3510-3-5-1-a8b80a6678.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.248 [INFO][4113] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.258 [INFO][4113] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.258 [INFO][4113] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-5-1-a8b80a6678.novalocal' Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.269 [INFO][4113] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.283 [INFO][4113] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.299 [INFO][4113] ipam.go 489: Trying affinity for 192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.305 [INFO][4113] ipam.go 155: Attempting to load block cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.308 [INFO][4113] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.106.0/26 host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.309 [INFO][4113] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.106.0/26 handle="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.312 [INFO][4113] ipam.go 1685: Creating new handle: k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.321 [INFO][4113] ipam.go 1203: Writing block in order to claim IPs block=192.168.106.0/26 handle="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.331 [INFO][4113] ipam.go 1216: Successfully claimed IPs: [192.168.106.6/26] block=192.168.106.0/26 handle="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.331 [INFO][4113] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.106.6/26] handle="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" host="ci-3510-3-5-1-a8b80a6678.novalocal" Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.331 [INFO][4113] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 08:44:27.365948 env[1144]: 2024-07-02 08:44:27.331 [INFO][4113] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.106.6/26] IPv6=[] ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" HandleID="k8s-pod-network.7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Workload="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.366793 env[1144]: 2024-07-02 08:44:27.339 [INFO][4086] k8s.go 386: Populated endpoint ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0", GenerateName:"calico-apiserver-7d7757c8fb-", Namespace:"calico-apiserver", SelfLink:"", UID:"33a23c5f-9689-4d34-9163-cd9be561a4b1", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 44, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d7757c8fb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"", Pod:"calico-apiserver-7d7757c8fb-ftnj9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.106.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b4a772211f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:27.366793 env[1144]: 2024-07-02 08:44:27.339 [INFO][4086] k8s.go 387: Calico CNI using IPs: [192.168.106.6/32] ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.366793 env[1144]: 2024-07-02 08:44:27.339 [INFO][4086] dataplane_linux.go 68: Setting the host side veth name to cali8b4a772211f ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.366793 env[1144]: 2024-07-02 08:44:27.350 [INFO][4086] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.366793 env[1144]: 2024-07-02 08:44:27.350 [INFO][4086] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0", GenerateName:"calico-apiserver-7d7757c8fb-", Namespace:"calico-apiserver", SelfLink:"", UID:"33a23c5f-9689-4d34-9163-cd9be561a4b1", ResourceVersion:"878", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 8, 44, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7d7757c8fb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-5-1-a8b80a6678.novalocal", ContainerID:"7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e", Pod:"calico-apiserver-7d7757c8fb-ftnj9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.106.6/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8b4a772211f", MAC:"7e:69:5c:ab:07:69", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 08:44:27.366793 env[1144]: 2024-07-02 08:44:27.363 [INFO][4086] k8s.go 500: Wrote updated endpoint to datastore ContainerID="7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e" Namespace="calico-apiserver" Pod="calico-apiserver-7d7757c8fb-ftnj9" WorkloadEndpoint="ci--3510--3--5--1--a8b80a6678.novalocal-k8s-calico--apiserver--7d7757c8fb--ftnj9-eth0" Jul 2 08:44:27.362000 audit[4159]: NETFILTER_CFG table=filter:114 family=2 entries=55 op=nft_register_chain pid=4159 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:27.362000 audit[4159]: SYSCALL arch=c000003e syscall=46 success=yes exit=27464 a0=3 a1=7ffc2c2e0040 a2=0 a3=7ffc2c2e002c items=0 ppid=3103 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.362000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:27.372782 systemd[1]: Started cri-containerd-db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0.scope. Jul 2 08:44:27.394126 env[1144]: time="2024-07-02T08:44:27.391662739Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 08:44:27.394126 env[1144]: time="2024-07-02T08:44:27.391768280Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 08:44:27.394126 env[1144]: time="2024-07-02T08:44:27.391783629Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 08:44:27.396522 env[1144]: time="2024-07-02T08:44:27.394591405Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e pid=4190 runtime=io.containerd.runc.v2 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.404000 audit: BPF prog-id=180 op=LOAD Jul 2 08:44:27.408000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.408000 audit[4152]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4140 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462366163316166373766623061656539346630656363616163356430 Jul 2 08:44:27.408000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.408000 audit[4152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4140 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462366163316166373766623061656539346630656363616163356430 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.409000 audit: BPF prog-id=181 op=LOAD Jul 2 08:44:27.409000 audit[4152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00034c1a0 items=0 ppid=4140 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462366163316166373766623061656539346630656363616163356430 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.410000 audit: BPF prog-id=182 op=LOAD Jul 2 08:44:27.410000 audit[4152]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00034c1e8 items=0 ppid=4140 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462366163316166373766623061656539346630656363616163356430 Jul 2 08:44:27.412000 audit: BPF prog-id=182 op=UNLOAD Jul 2 08:44:27.412000 audit: BPF prog-id=181 op=UNLOAD Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { perfmon } for pid=4152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit[4152]: AVC avc: denied { bpf } for pid=4152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.413000 audit: BPF prog-id=183 op=LOAD Jul 2 08:44:27.413000 audit[4152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00034c5f8 items=0 ppid=4140 pid=4152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6462366163316166373766623061656539346630656363616163356430 Jul 2 08:44:27.414000 audit[4207]: NETFILTER_CFG table=filter:115 family=2 entries=49 op=nft_register_chain pid=4207 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 08:44:27.414000 audit[4207]: SYSCALL arch=c000003e syscall=46 success=yes exit=24300 a0=3 a1=7fff5364c920 a2=0 a3=7fff5364c90c items=0 ppid=3103 pid=4207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.414000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 08:44:27.425224 systemd[1]: Started cri-containerd-7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e.scope. Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.447000 audit: BPF prog-id=184 op=LOAD Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4190 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623434386363326365333762353863363961373363336564333234 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4190 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623434386363326365333762353863363961373363336564333234 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit: BPF prog-id=185 op=LOAD Jul 2 08:44:27.449000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001025e0 items=0 ppid=4190 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623434386363326365333762353863363961373363336564333234 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit: BPF prog-id=186 op=LOAD Jul 2 08:44:27.449000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000102628 items=0 ppid=4190 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623434386363326365333762353863363961373363336564333234 Jul 2 08:44:27.449000 audit: BPF prog-id=186 op=UNLOAD Jul 2 08:44:27.449000 audit: BPF prog-id=185 op=UNLOAD Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { perfmon } for pid=4202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit[4202]: AVC avc: denied { bpf } for pid=4202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:27.449000 audit: BPF prog-id=187 op=LOAD Jul 2 08:44:27.449000 audit[4202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000102a38 items=0 ppid=4190 pid=4202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:27.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623434386363326365333762353863363961373363336564333234 Jul 2 08:44:27.480225 env[1144]: time="2024-07-02T08:44:27.478930607Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d7757c8fb-vb4kr,Uid:58268b85-4675-4d8b-84e3-f66b9a077cc6,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0\"" Jul 2 08:44:27.480864 env[1144]: time="2024-07-02T08:44:27.480830458Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 08:44:27.507024 env[1144]: time="2024-07-02T08:44:27.506964677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7d7757c8fb-ftnj9,Uid:33a23c5f-9689-4d34-9163-cd9be561a4b1,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e\"" Jul 2 08:44:28.521634 systemd-networkd[969]: cali8b4a772211f: Gained IPv6LL Jul 2 08:44:28.773832 systemd-networkd[969]: cali94c2692aefa: Gained IPv6LL Jul 2 08:44:29.218216 systemd[1]: run-containerd-runc-k8s.io-e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1-runc.oOZvEo.mount: Deactivated successfully. Jul 2 08:44:32.430107 env[1144]: time="2024-07-02T08:44:32.430068012Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.434104 env[1144]: time="2024-07-02T08:44:32.434068839Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.435693 env[1144]: time="2024-07-02T08:44:32.435668803Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.437482 env[1144]: time="2024-07-02T08:44:32.437432518Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.438052 env[1144]: time="2024-07-02T08:44:32.438028358Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 08:44:32.440043 env[1144]: time="2024-07-02T08:44:32.440004636Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 08:44:32.441118 env[1144]: time="2024-07-02T08:44:32.441080817Z" level=info msg="CreateContainer within sandbox \"db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 08:44:32.465015 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1920234158.mount: Deactivated successfully. Jul 2 08:44:32.721556 env[1144]: time="2024-07-02T08:44:32.721286149Z" level=info msg="CreateContainer within sandbox \"db6ac1af77fb0aee94f0eccaac5d04745ee2a0fd18f4b9d8de718019101a0db0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"dc96231705b417fa03937ba7d3aa0b205bf299d0b09a95f99f554fde43470cf2\"" Jul 2 08:44:32.723421 env[1144]: time="2024-07-02T08:44:32.723245645Z" level=info msg="StartContainer for \"dc96231705b417fa03937ba7d3aa0b205bf299d0b09a95f99f554fde43470cf2\"" Jul 2 08:44:32.808783 systemd[1]: Started cri-containerd-dc96231705b417fa03937ba7d3aa0b205bf299d0b09a95f99f554fde43470cf2.scope. Jul 2 08:44:32.854878 kernel: kauditd_printk_skb: 122 callbacks suppressed Jul 2 08:44:32.855000 kernel: audit: type=1400 audit(1719909872.849:1176): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.855030 kernel: audit: type=1400 audit(1719909872.849:1177): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.861242 kernel: audit: type=1400 audit(1719909872.849:1178): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.868589 kernel: audit: type=1400 audit(1719909872.849:1179): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.868652 kernel: audit: type=1400 audit(1719909872.849:1180): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.868693 kernel: audit: type=1400 audit(1719909872.849:1181): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.872185 kernel: audit: type=1400 audit(1719909872.849:1182): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.875583 kernel: audit: type=1400 audit(1719909872.849:1183): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.881964 kernel: audit: type=1400 audit(1719909872.849:1184): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.882007 kernel: audit: type=1400 audit(1719909872.857:1185): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.857000 audit: BPF prog-id=188 op=LOAD Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4140 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:32.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463393632333137303562343137666130333933376261376433616130 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4140 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:32.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463393632333137303562343137666130333933376261376433616130 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit: BPF prog-id=189 op=LOAD Jul 2 08:44:32.860000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001e3fe0 items=0 ppid=4140 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:32.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463393632333137303562343137666130333933376261376433616130 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit: BPF prog-id=190 op=LOAD Jul 2 08:44:32.860000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000308028 items=0 ppid=4140 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:32.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463393632333137303562343137666130333933376261376433616130 Jul 2 08:44:32.860000 audit: BPF prog-id=190 op=UNLOAD Jul 2 08:44:32.860000 audit: BPF prog-id=189 op=UNLOAD Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:32.860000 audit: BPF prog-id=191 op=LOAD Jul 2 08:44:32.860000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000308438 items=0 ppid=4140 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:32.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463393632333137303562343137666130333933376261376433616130 Jul 2 08:44:32.937753 env[1144]: time="2024-07-02T08:44:32.937660051Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.941558 env[1144]: time="2024-07-02T08:44:32.941514330Z" level=info msg="StartContainer for \"dc96231705b417fa03937ba7d3aa0b205bf299d0b09a95f99f554fde43470cf2\" returns successfully" Jul 2 08:44:32.944393 env[1144]: time="2024-07-02T08:44:32.942873709Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.948337 env[1144]: time="2024-07-02T08:44:32.948271906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.949574 env[1144]: time="2024-07-02T08:44:32.949529240Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 08:44:32.950265 env[1144]: time="2024-07-02T08:44:32.950229929Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 08:44:32.956688 env[1144]: time="2024-07-02T08:44:32.956617502Z" level=info msg="CreateContainer within sandbox \"7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 08:44:32.975805 env[1144]: time="2024-07-02T08:44:32.973608263Z" level=info msg="CreateContainer within sandbox \"7ab448cc2ce37b58c69a73c3ed32411d07f57b8c843ea43d7671ea9170373c6e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"19442eeebda3c0bb319b78528b0c0b8e706a3a4e65a5ce884498a1f555655b34\"" Jul 2 08:44:32.978471 env[1144]: time="2024-07-02T08:44:32.978407034Z" level=info msg="StartContainer for \"19442eeebda3c0bb319b78528b0c0b8e706a3a4e65a5ce884498a1f555655b34\"" Jul 2 08:44:32.999162 systemd[1]: Started cri-containerd-19442eeebda3c0bb319b78528b0c0b8e706a3a4e65a5ce884498a1f555655b34.scope. Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.022000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.024000 audit: BPF prog-id=192 op=LOAD Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4190 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343432656565626461336330626233313962373835323862306330 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4190 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343432656565626461336330626233313962373835323862306330 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit: BPF prog-id=193 op=LOAD Jul 2 08:44:33.025000 audit[4299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003a0430 items=0 ppid=4190 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343432656565626461336330626233313962373835323862306330 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit: BPF prog-id=194 op=LOAD Jul 2 08:44:33.025000 audit[4299]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003a0478 items=0 ppid=4190 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343432656565626461336330626233313962373835323862306330 Jul 2 08:44:33.025000 audit: BPF prog-id=194 op=UNLOAD Jul 2 08:44:33.025000 audit: BPF prog-id=193 op=UNLOAD Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { perfmon } for pid=4299 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit[4299]: AVC avc: denied { bpf } for pid=4299 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 08:44:33.025000 audit: BPF prog-id=195 op=LOAD Jul 2 08:44:33.025000 audit[4299]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a0888 items=0 ppid=4190 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343432656565626461336330626233313962373835323862306330 Jul 2 08:44:33.065340 env[1144]: time="2024-07-02T08:44:33.065289309Z" level=info msg="StartContainer for \"19442eeebda3c0bb319b78528b0c0b8e706a3a4e65a5ce884498a1f555655b34\" returns successfully" Jul 2 08:44:33.634393 kubelet[2000]: I0702 08:44:33.634313 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7d7757c8fb-vb4kr" podStartSLOduration=2.675297049 podStartE2EDuration="7.634295025s" podCreationTimestamp="2024-07-02 08:44:26 +0000 UTC" firstStartedPulling="2024-07-02 08:44:27.480109457 +0000 UTC m=+65.527519149" lastFinishedPulling="2024-07-02 08:44:32.439107424 +0000 UTC m=+70.486517125" observedRunningTime="2024-07-02 08:44:33.632775244 +0000 UTC m=+71.680184965" watchObservedRunningTime="2024-07-02 08:44:33.634295025 +0000 UTC m=+71.681704716" Jul 2 08:44:33.689000 audit[4332]: NETFILTER_CFG table=filter:116 family=2 entries=10 op=nft_register_rule pid=4332 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:33.689000 audit[4332]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffddd8cd6e0 a2=0 a3=7ffddd8cd6cc items=0 ppid=2179 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.689000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:33.690000 audit[4332]: NETFILTER_CFG table=nat:117 family=2 entries=20 op=nft_register_rule pid=4332 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:33.690000 audit[4332]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffddd8cd6e0 a2=0 a3=7ffddd8cd6cc items=0 ppid=2179 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:33.708000 audit[4334]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=4334 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:33.708000 audit[4334]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fff85a15f30 a2=0 a3=7fff85a15f1c items=0 ppid=2179 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.708000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:33.712000 audit[4334]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4334 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:33.712000 audit[4334]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff85a15f30 a2=0 a3=7fff85a15f1c items=0 ppid=2179 pid=4334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:33.712000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:33.994000 audit[4310]: AVC avc: denied { watch } for pid=4310 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_44_26.612509610/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c772 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c685,c772 tclass=file permissive=0 Jul 2 08:44:33.994000 audit[4310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ed17c0 a2=fc6 a3=0 items=0 ppid=4190 pid=4310 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c772 key=(null) Jul 2 08:44:33.994000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:44:34.032029 kubelet[2000]: I0702 08:44:34.031959 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7d7757c8fb-ftnj9" podStartSLOduration=2.587964424 podStartE2EDuration="8.031936491s" podCreationTimestamp="2024-07-02 08:44:26 +0000 UTC" firstStartedPulling="2024-07-02 08:44:27.508443738 +0000 UTC m=+65.555853429" lastFinishedPulling="2024-07-02 08:44:32.952415794 +0000 UTC m=+70.999825496" observedRunningTime="2024-07-02 08:44:33.648726341 +0000 UTC m=+71.696136032" watchObservedRunningTime="2024-07-02 08:44:34.031936491 +0000 UTC m=+72.079346182" Jul 2 08:44:34.270000 audit[4270]: AVC avc: denied { watch } for pid=4270 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_44_26.2406956723/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c430,c989 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c430,c989 tclass=file permissive=0 Jul 2 08:44:34.270000 audit[4270]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000bb5080 a2=fc6 a3=0 items=0 ppid=4140 pid=4270 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c430,c989 key=(null) Jul 2 08:44:34.270000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:44:34.744000 audit[4347]: NETFILTER_CFG table=filter:120 family=2 entries=9 op=nft_register_rule pid=4347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:34.744000 audit[4347]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fffccb12b90 a2=0 a3=7fffccb12b7c items=0 ppid=2179 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:34.744000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:34.748000 audit[4347]: NETFILTER_CFG table=nat:121 family=2 entries=31 op=nft_register_chain pid=4347 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:44:34.748000 audit[4347]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7fffccb12b90 a2=0 a3=7fffccb12b7c items=0 ppid=2179 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:34.748000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:44:38.048771 systemd[1]: Started sshd@7-172.24.4.178:22-172.24.4.1:39042.service. Jul 2 08:44:38.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.178:22-172.24.4.1:39042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:38.064872 kernel: kauditd_printk_skb: 128 callbacks suppressed Jul 2 08:44:38.065056 kernel: audit: type=1130 audit(1719909878.048:1220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.178:22-172.24.4.1:39042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:39.268000 audit[4357]: USER_ACCT pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.272216 sshd[4357]: Accepted publickey for core from 172.24.4.1 port 39042 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:44:39.282023 kernel: audit: type=1101 audit(1719909879.268:1221): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.284000 audit[4357]: CRED_ACQ pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.297783 kernel: audit: type=1103 audit(1719909879.284:1222): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.299037 sshd[4357]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:44:39.307054 kernel: audit: type=1006 audit(1719909879.284:1223): pid=4357 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 2 08:44:39.307193 kernel: audit: type=1300 audit(1719909879.284:1223): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec3f271d0 a2=3 a3=0 items=0 ppid=1 pid=4357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:39.284000 audit[4357]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec3f271d0 a2=3 a3=0 items=0 ppid=1 pid=4357 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:39.284000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:39.324535 kernel: audit: type=1327 audit(1719909879.284:1223): proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:39.331537 systemd-logind[1133]: New session 8 of user core. Jul 2 08:44:39.334233 systemd[1]: Started session-8.scope. Jul 2 08:44:39.347000 audit[4357]: USER_START pid=4357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.361796 kernel: audit: type=1105 audit(1719909879.347:1224): pid=4357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.362072 kernel: audit: type=1103 audit(1719909879.347:1225): pid=4359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:39.347000 audit[4359]: CRED_ACQ pid=4359 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:41.209644 sshd[4357]: pam_unix(sshd:session): session closed for user core Jul 2 08:44:41.210000 audit[4357]: USER_END pid=4357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:41.210000 audit[4357]: CRED_DISP pid=4357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:41.218700 systemd[1]: sshd@7-172.24.4.178:22-172.24.4.1:39042.service: Deactivated successfully. Jul 2 08:44:41.220045 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 08:44:41.223179 kernel: audit: type=1106 audit(1719909881.210:1226): pid=4357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:41.223647 kernel: audit: type=1104 audit(1719909881.210:1227): pid=4357 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:41.223977 systemd-logind[1133]: Session 8 logged out. Waiting for processes to exit. Jul 2 08:44:41.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.178:22-172.24.4.1:39042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:41.224946 systemd-logind[1133]: Removed session 8. Jul 2 08:44:46.220791 systemd[1]: Started sshd@8-172.24.4.178:22-172.24.4.1:45646.service. Jul 2 08:44:46.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.178:22-172.24.4.1:45646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:46.223861 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:44:46.224026 kernel: audit: type=1130 audit(1719909886.222:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.178:22-172.24.4.1:45646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:47.612000 audit[4406]: USER_ACCT pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.617805 sshd[4406]: Accepted publickey for core from 172.24.4.1 port 45646 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:44:47.618483 kernel: audit: type=1101 audit(1719909887.612:1230): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.619000 audit[4406]: CRED_ACQ pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.621705 sshd[4406]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:44:47.625653 kernel: audit: type=1103 audit(1719909887.619:1231): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.632577 kernel: audit: type=1006 audit(1719909887.619:1232): pid=4406 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 2 08:44:47.619000 audit[4406]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbda1ce80 a2=3 a3=0 items=0 ppid=1 pid=4406 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:47.636331 systemd[1]: Started session-9.scope. Jul 2 08:44:47.638047 systemd-logind[1133]: New session 9 of user core. Jul 2 08:44:47.640008 kernel: audit: type=1300 audit(1719909887.619:1232): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbda1ce80 a2=3 a3=0 items=0 ppid=1 pid=4406 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:47.640078 kernel: audit: type=1327 audit(1719909887.619:1232): proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:47.619000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:47.650000 audit[4406]: USER_START pid=4406 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.658295 kernel: audit: type=1105 audit(1719909887.650:1233): pid=4406 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.658421 kernel: audit: type=1103 audit(1719909887.657:1234): pid=4410 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:47.657000 audit[4410]: CRED_ACQ pid=4410 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:48.415496 sshd[4406]: pam_unix(sshd:session): session closed for user core Jul 2 08:44:48.418000 audit[4406]: USER_END pid=4406 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:48.421209 systemd[1]: sshd@8-172.24.4.178:22-172.24.4.1:45646.service: Deactivated successfully. Jul 2 08:44:48.422293 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 08:44:48.432595 kernel: audit: type=1106 audit(1719909888.418:1235): pid=4406 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:48.433039 systemd-logind[1133]: Session 9 logged out. Waiting for processes to exit. Jul 2 08:44:48.434932 systemd-logind[1133]: Removed session 9. Jul 2 08:44:48.418000 audit[4406]: CRED_DISP pid=4406 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:48.440550 kernel: audit: type=1104 audit(1719909888.418:1236): pid=4406 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:48.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.178:22-172.24.4.1:45646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:53.429456 systemd[1]: Started sshd@9-172.24.4.178:22-172.24.4.1:45660.service. Jul 2 08:44:53.443818 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:44:53.443900 kernel: audit: type=1130 audit(1719909893.429:1238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.178:22-172.24.4.1:45660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:53.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.178:22-172.24.4.1:45660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:54.783000 audit[4422]: USER_ACCT pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.784101 sshd[4422]: Accepted publickey for core from 172.24.4.1 port 45660 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:44:54.797695 kernel: audit: type=1101 audit(1719909894.783:1239): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.799000 audit[4422]: CRED_ACQ pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.803675 sshd[4422]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:44:54.812889 kernel: audit: type=1103 audit(1719909894.799:1240): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.813158 kernel: audit: type=1006 audit(1719909894.801:1241): pid=4422 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 2 08:44:54.801000 audit[4422]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb48181a0 a2=3 a3=0 items=0 ppid=1 pid=4422 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:54.832645 kernel: audit: type=1300 audit(1719909894.801:1241): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb48181a0 a2=3 a3=0 items=0 ppid=1 pid=4422 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:54.801000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:54.837520 kernel: audit: type=1327 audit(1719909894.801:1241): proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:54.844331 systemd-logind[1133]: New session 10 of user core. Jul 2 08:44:54.850950 systemd[1]: Started session-10.scope. Jul 2 08:44:54.859000 audit[4422]: USER_START pid=4422 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.866837 kernel: audit: type=1105 audit(1719909894.859:1242): pid=4422 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.866979 kernel: audit: type=1103 audit(1719909894.865:1243): pid=4430 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:54.865000 audit[4430]: CRED_ACQ pid=4430 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:55.678671 sshd[4422]: pam_unix(sshd:session): session closed for user core Jul 2 08:44:55.684000 audit[4422]: USER_END pid=4422 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:55.686908 systemd[1]: Started sshd@10-172.24.4.178:22-172.24.4.1:46916.service. Jul 2 08:44:55.699542 kernel: audit: type=1106 audit(1719909895.684:1244): pid=4422 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:55.703973 systemd[1]: sshd@9-172.24.4.178:22-172.24.4.1:45660.service: Deactivated successfully. Jul 2 08:44:55.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.178:22-172.24.4.1:46916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:55.706525 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 08:44:55.717957 systemd-logind[1133]: Session 10 logged out. Waiting for processes to exit. Jul 2 08:44:55.718538 kernel: audit: type=1130 audit(1719909895.687:1245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.178:22-172.24.4.1:46916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:55.700000 audit[4422]: CRED_DISP pid=4422 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:55.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.178:22-172.24.4.1:45660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:55.723695 systemd-logind[1133]: Removed session 10. Jul 2 08:44:57.088138 sshd[4445]: Accepted publickey for core from 172.24.4.1 port 46916 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:44:57.087000 audit[4445]: USER_ACCT pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:57.089000 audit[4445]: CRED_ACQ pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:57.090000 audit[4445]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1f6da320 a2=3 a3=0 items=0 ppid=1 pid=4445 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:57.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:57.096689 sshd[4445]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:44:57.106023 systemd-logind[1133]: New session 11 of user core. Jul 2 08:44:57.106671 systemd[1]: Started session-11.scope. Jul 2 08:44:57.112000 audit[4445]: USER_START pid=4445 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:57.114000 audit[4469]: CRED_ACQ pid=4469 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:58.098082 sshd[4445]: pam_unix(sshd:session): session closed for user core Jul 2 08:44:58.108000 audit[4445]: USER_END pid=4445 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:58.108000 audit[4445]: CRED_DISP pid=4445 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:58.112130 systemd[1]: Started sshd@11-172.24.4.178:22-172.24.4.1:46932.service. Jul 2 08:44:58.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.178:22-172.24.4.1:46932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:58.120911 systemd[1]: sshd@10-172.24.4.178:22-172.24.4.1:46916.service: Deactivated successfully. Jul 2 08:44:58.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.178:22-172.24.4.1:46916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:44:58.129762 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 08:44:58.131912 systemd-logind[1133]: Session 11 logged out. Waiting for processes to exit. Jul 2 08:44:58.136106 systemd-logind[1133]: Removed session 11. Jul 2 08:44:59.236000 audit[4476]: USER_ACCT pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.237422 sshd[4476]: Accepted publickey for core from 172.24.4.1 port 46932 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:44:59.237724 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 08:44:59.237768 kernel: audit: type=1101 audit(1719909899.236:1257): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.242568 kernel: audit: type=1103 audit(1719909899.241:1258): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.241000 audit[4476]: CRED_ACQ pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.243783 sshd[4476]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:44:59.250337 kernel: audit: type=1006 audit(1719909899.242:1259): pid=4476 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 2 08:44:59.250517 kernel: audit: type=1300 audit(1719909899.242:1259): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd08be3c0 a2=3 a3=0 items=0 ppid=1 pid=4476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:59.242000 audit[4476]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd08be3c0 a2=3 a3=0 items=0 ppid=1 pid=4476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:44:59.242000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:59.259552 kernel: audit: type=1327 audit(1719909899.242:1259): proctitle=737368643A20636F7265205B707269765D Jul 2 08:44:59.263689 systemd-logind[1133]: New session 12 of user core. Jul 2 08:44:59.264403 systemd[1]: Started session-12.scope. Jul 2 08:44:59.270000 audit[4476]: USER_START pid=4476 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.277568 kernel: audit: type=1105 audit(1719909899.270:1260): pid=4476 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.278000 audit[4498]: CRED_ACQ pid=4498 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:44:59.286041 kernel: audit: type=1103 audit(1719909899.278:1261): pid=4498 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:00.156672 sshd[4476]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:00.158000 audit[4476]: USER_END pid=4476 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:00.169529 kernel: audit: type=1106 audit(1719909900.158:1262): pid=4476 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:00.169539 systemd[1]: sshd@11-172.24.4.178:22-172.24.4.1:46932.service: Deactivated successfully. Jul 2 08:45:00.171502 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 08:45:00.173593 systemd-logind[1133]: Session 12 logged out. Waiting for processes to exit. Jul 2 08:45:00.177123 systemd-logind[1133]: Removed session 12. Jul 2 08:45:00.158000 audit[4476]: CRED_DISP pid=4476 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:00.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.178:22-172.24.4.1:46932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:00.195029 kernel: audit: type=1104 audit(1719909900.158:1263): pid=4476 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:00.195152 kernel: audit: type=1131 audit(1719909900.169:1264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.178:22-172.24.4.1:46932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:05.162285 systemd[1]: Started sshd@12-172.24.4.178:22-172.24.4.1:35958.service. Jul 2 08:45:05.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.178:22-172.24.4.1:35958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:05.168526 kernel: audit: type=1130 audit(1719909905.162:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.178:22-172.24.4.1:35958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:06.586000 audit[4513]: USER_ACCT pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.587838 sshd[4513]: Accepted publickey for core from 172.24.4.1 port 35958 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:06.598658 kernel: audit: type=1101 audit(1719909906.586:1266): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.601125 sshd[4513]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:06.599000 audit[4513]: CRED_ACQ pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.616009 kernel: audit: type=1103 audit(1719909906.599:1267): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.622388 systemd-logind[1133]: New session 13 of user core. Jul 2 08:45:06.623755 systemd[1]: Started session-13.scope. Jul 2 08:45:06.635640 kernel: audit: type=1006 audit(1719909906.599:1268): pid=4513 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 2 08:45:06.599000 audit[4513]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1c0c6f80 a2=3 a3=0 items=0 ppid=1 pid=4513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:06.653526 kernel: audit: type=1300 audit(1719909906.599:1268): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1c0c6f80 a2=3 a3=0 items=0 ppid=1 pid=4513 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:06.653735 kernel: audit: type=1327 audit(1719909906.599:1268): proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:06.599000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:06.642000 audit[4513]: USER_START pid=4513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.647000 audit[4520]: CRED_ACQ pid=4520 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.672191 kernel: audit: type=1105 audit(1719909906.642:1269): pid=4513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:06.672269 kernel: audit: type=1103 audit(1719909906.647:1270): pid=4520 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:07.485247 sshd[4513]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:07.488000 audit[4513]: USER_END pid=4513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:07.501616 kernel: audit: type=1106 audit(1719909907.488:1271): pid=4513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:07.501000 audit[4513]: CRED_DISP pid=4513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:07.506360 systemd[1]: sshd@12-172.24.4.178:22-172.24.4.1:35958.service: Deactivated successfully. Jul 2 08:45:07.508026 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 08:45:07.509326 systemd-logind[1133]: Session 13 logged out. Waiting for processes to exit. Jul 2 08:45:07.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.178:22-172.24.4.1:35958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:07.512533 kernel: audit: type=1104 audit(1719909907.501:1272): pid=4513 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:07.513945 systemd-logind[1133]: Removed session 13. Jul 2 08:45:12.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.178:22-172.24.4.1:35968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:12.495701 systemd[1]: Started sshd@13-172.24.4.178:22-172.24.4.1:35968.service. Jul 2 08:45:12.499222 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:45:12.499356 kernel: audit: type=1130 audit(1719909912.495:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.178:22-172.24.4.1:35968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:13.823449 systemd[1]: run-containerd-runc-k8s.io-29fd92caccc258d8c07ca4ed8e433d453da54de0ca80df358b714e89c95844e7-runc.JvfMPO.mount: Deactivated successfully. Jul 2 08:45:13.939183 sshd[4535]: Accepted publickey for core from 172.24.4.1 port 35968 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:13.938000 audit[4535]: USER_ACCT pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:13.945488 kernel: audit: type=1101 audit(1719909913.938:1275): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:13.952000 audit[4535]: CRED_ACQ pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:13.961682 kernel: audit: type=1103 audit(1719909913.952:1276): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:13.961846 kernel: audit: type=1006 audit(1719909913.952:1277): pid=4535 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 2 08:45:13.952000 audit[4535]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1e9ac930 a2=3 a3=0 items=0 ppid=1 pid=4535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:13.968508 kernel: audit: type=1300 audit(1719909913.952:1277): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1e9ac930 a2=3 a3=0 items=0 ppid=1 pid=4535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:13.952000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:13.972266 sshd[4535]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:13.972716 kernel: audit: type=1327 audit(1719909913.952:1277): proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:13.985699 systemd-logind[1133]: New session 14 of user core. Jul 2 08:45:13.986428 systemd[1]: Started session-14.scope. Jul 2 08:45:14.001000 audit[4535]: USER_START pid=4535 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.008530 kernel: audit: type=1105 audit(1719909914.001:1278): pid=4535 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.008000 audit[4557]: CRED_ACQ pid=4557 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.013492 kernel: audit: type=1103 audit(1719909914.008:1279): pid=4557 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.733692 sshd[4535]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:14.734000 audit[4535]: USER_END pid=4535 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.740524 kernel: audit: type=1106 audit(1719909914.734:1280): pid=4535 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.740000 audit[4535]: CRED_DISP pid=4535 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.756526 kernel: audit: type=1104 audit(1719909914.740:1281): pid=4535 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:14.763063 systemd[1]: sshd@13-172.24.4.178:22-172.24.4.1:35968.service: Deactivated successfully. Jul 2 08:45:14.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.178:22-172.24.4.1:35968 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:14.765222 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 08:45:14.767119 systemd-logind[1133]: Session 14 logged out. Waiting for processes to exit. Jul 2 08:45:14.770599 systemd-logind[1133]: Removed session 14. Jul 2 08:45:16.184000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:16.184000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001e6fee0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:16.184000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:16.185000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:16.185000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000621bc0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:16.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:17.017000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:17.018000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:17.018000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c011732400 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:45:17.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:45:17.018000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:17.018000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00e1d0b70 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:45:17.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:45:17.017000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00e1d0ae0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:45:17.017000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:45:17.024000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=526906 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:17.024000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00e1d0ea0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:45:17.024000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:45:17.025000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:17.025000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00e1d0f00 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:45:17.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:45:17.026000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:17.026000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c011732620 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:45:17.026000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:45:19.739270 systemd[1]: Started sshd@14-172.24.4.178:22-172.24.4.1:32822.service. Jul 2 08:45:19.746112 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 2 08:45:19.746230 kernel: audit: type=1130 audit(1719909919.739:1291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.178:22-172.24.4.1:32822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:19.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.178:22-172.24.4.1:32822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:20.312000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.312000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002469d40 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.338118 kernel: audit: type=1400 audit(1719909920.312:1292): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.339243 kernel: audit: type=1300 audit(1719909920.312:1292): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002469d40 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.339321 kernel: audit: type=1327 audit(1719909920.312:1292): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.312000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.315000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.361585 kernel: audit: type=1400 audit(1719909920.315:1293): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.315000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002469d60 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.375738 kernel: audit: type=1300 audit(1719909920.315:1293): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002469d60 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.375986 kernel: audit: type=1327 audit(1719909920.315:1293): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.315000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.329000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.329000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002469f00 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.399870 kernel: audit: type=1400 audit(1719909920.329:1294): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.400035 kernel: audit: type=1300 audit(1719909920.329:1294): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002469f00 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.400108 kernel: audit: type=1327 audit(1719909920.329:1294): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.339000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:45:20.339000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ce0720 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:45:20.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:45:20.995000 audit[4575]: USER_ACCT pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:20.996638 sshd[4575]: Accepted publickey for core from 172.24.4.1 port 32822 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:20.998000 audit[4575]: CRED_ACQ pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:20.998000 audit[4575]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1b962f70 a2=3 a3=0 items=0 ppid=1 pid=4575 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:20.998000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:20.999911 sshd[4575]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:21.011439 systemd-logind[1133]: New session 15 of user core. Jul 2 08:45:21.012216 systemd[1]: Started session-15.scope. Jul 2 08:45:21.027000 audit[4575]: USER_START pid=4575 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:21.030000 audit[4577]: CRED_ACQ pid=4577 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:21.819975 sshd[4575]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:21.828763 systemd[1]: Started sshd@15-172.24.4.178:22-172.24.4.1:32834.service. Jul 2 08:45:21.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.178:22-172.24.4.1:32834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:21.839000 audit[4575]: USER_END pid=4575 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:21.840000 audit[4575]: CRED_DISP pid=4575 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:21.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.178:22-172.24.4.1:32822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:21.843758 systemd[1]: sshd@14-172.24.4.178:22-172.24.4.1:32822.service: Deactivated successfully. Jul 2 08:45:21.845894 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 08:45:21.847586 systemd-logind[1133]: Session 15 logged out. Waiting for processes to exit. Jul 2 08:45:21.850094 systemd-logind[1133]: Removed session 15. Jul 2 08:45:23.339181 sshd[4586]: Accepted publickey for core from 172.24.4.1 port 32834 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:23.338000 audit[4586]: USER_ACCT pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:23.339000 audit[4586]: CRED_ACQ pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:23.339000 audit[4586]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff34390840 a2=3 a3=0 items=0 ppid=1 pid=4586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:23.339000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:23.340621 sshd[4586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:23.346895 systemd[1]: Started session-16.scope. Jul 2 08:45:23.347346 systemd-logind[1133]: New session 16 of user core. Jul 2 08:45:23.352000 audit[4586]: USER_START pid=4586 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:23.354000 audit[4591]: CRED_ACQ pid=4591 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:24.767288 systemd[1]: Started sshd@16-172.24.4.178:22-172.24.4.1:44126.service. Jul 2 08:45:24.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.178:22-172.24.4.1:44126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:24.781532 kernel: kauditd_printk_skb: 21 callbacks suppressed Jul 2 08:45:24.781678 kernel: audit: type=1130 audit(1719909924.768:1310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.178:22-172.24.4.1:44126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:24.907691 sshd[4586]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:24.969000 audit[4586]: USER_END pid=4586 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:24.974412 systemd[1]: sshd@15-172.24.4.178:22-172.24.4.1:32834.service: Deactivated successfully. Jul 2 08:45:24.976922 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 08:45:24.986150 kernel: audit: type=1106 audit(1719909924.969:1311): pid=4586 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:24.986361 kernel: audit: type=1104 audit(1719909924.969:1312): pid=4586 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:25.032838 kernel: audit: type=1131 audit(1719909924.973:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.178:22-172.24.4.1:32834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:24.969000 audit[4586]: CRED_DISP pid=4586 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:24.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.178:22-172.24.4.1:32834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:24.996874 systemd-logind[1133]: Session 16 logged out. Waiting for processes to exit. Jul 2 08:45:24.999272 systemd-logind[1133]: Removed session 16. Jul 2 08:45:26.424172 sshd[4598]: Accepted publickey for core from 172.24.4.1 port 44126 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:26.423000 audit[4598]: USER_ACCT pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:26.436521 kernel: audit: type=1101 audit(1719909926.423:1314): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:26.436000 audit[4598]: CRED_ACQ pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:26.437983 sshd[4598]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:26.453888 kernel: audit: type=1103 audit(1719909926.436:1315): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:26.454031 kernel: audit: type=1006 audit(1719909926.436:1316): pid=4598 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 2 08:45:26.455548 kernel: audit: type=1300 audit(1719909926.436:1316): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe45447060 a2=3 a3=0 items=0 ppid=1 pid=4598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:26.436000 audit[4598]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe45447060 a2=3 a3=0 items=0 ppid=1 pid=4598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:26.436000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:26.470589 kernel: audit: type=1327 audit(1719909926.436:1316): proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:26.479944 systemd-logind[1133]: New session 17 of user core. Jul 2 08:45:26.480964 systemd[1]: Started session-17.scope. Jul 2 08:45:26.494000 audit[4598]: USER_START pid=4598 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:26.509382 kernel: audit: type=1105 audit(1719909926.494:1317): pid=4598 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:26.507000 audit[4606]: CRED_ACQ pid=4606 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:29.203237 systemd[1]: run-containerd-runc-k8s.io-e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1-runc.uDhter.mount: Deactivated successfully. Jul 2 08:45:29.875000 audit[4635]: NETFILTER_CFG table=filter:122 family=2 entries=20 op=nft_register_rule pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.878710 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:45:29.878786 kernel: audit: type=1325 audit(1719909929.875:1319): table=filter:122 family=2 entries=20 op=nft_register_rule pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.875000 audit[4635]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffc7fe10b30 a2=0 a3=7ffc7fe10b1c items=0 ppid=2179 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.886955 kernel: audit: type=1300 audit(1719909929.875:1319): arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffc7fe10b30 a2=0 a3=7ffc7fe10b1c items=0 ppid=2179 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.875000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.890058 kernel: audit: type=1327 audit(1719909929.875:1319): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.890122 kernel: audit: type=1325 audit(1719909929.877:1320): table=nat:123 family=2 entries=22 op=nft_register_rule pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.877000 audit[4635]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4635 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.877000 audit[4635]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc7fe10b30 a2=0 a3=0 items=0 ppid=2179 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.902509 kernel: audit: type=1300 audit(1719909929.877:1320): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc7fe10b30 a2=0 a3=0 items=0 ppid=2179 pid=4635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.902849 kernel: audit: type=1327 audit(1719909929.877:1320): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.877000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.910000 audit[4637]: NETFILTER_CFG table=filter:124 family=2 entries=32 op=nft_register_rule pid=4637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.910000 audit[4637]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffdd1fb7e30 a2=0 a3=7ffdd1fb7e1c items=0 ppid=2179 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.919926 kernel: audit: type=1325 audit(1719909929.910:1321): table=filter:124 family=2 entries=32 op=nft_register_rule pid=4637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.920633 kernel: audit: type=1300 audit(1719909929.910:1321): arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffdd1fb7e30 a2=0 a3=7ffdd1fb7e1c items=0 ppid=2179 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.920672 kernel: audit: type=1327 audit(1719909929.910:1321): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.919000 audit[4637]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:29.919000 audit[4637]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdd1fb7e30 a2=0 a3=0 items=0 ppid=2179 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:29.919000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:29.928510 kernel: audit: type=1325 audit(1719909929.919:1322): table=nat:125 family=2 entries=22 op=nft_register_rule pid=4637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:30.123507 sshd[4598]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:30.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.178:22-172.24.4.1:44138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:30.125402 systemd[1]: Started sshd@17-172.24.4.178:22-172.24.4.1:44138.service. Jul 2 08:45:30.128000 audit[4598]: USER_END pid=4598 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:30.131000 audit[4598]: CRED_DISP pid=4598 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:30.138305 systemd[1]: sshd@16-172.24.4.178:22-172.24.4.1:44126.service: Deactivated successfully. Jul 2 08:45:30.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.178:22-172.24.4.1:44126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:30.139232 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 08:45:30.142342 systemd-logind[1133]: Session 17 logged out. Waiting for processes to exit. Jul 2 08:45:30.145296 systemd-logind[1133]: Removed session 17. Jul 2 08:45:31.253000 audit[4639]: USER_ACCT pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:31.256299 sshd[4639]: Accepted publickey for core from 172.24.4.1 port 44138 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:31.257000 audit[4639]: CRED_ACQ pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:31.257000 audit[4639]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe905d7290 a2=3 a3=0 items=0 ppid=1 pid=4639 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:31.257000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:31.260987 sshd[4639]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:31.272597 systemd-logind[1133]: New session 18 of user core. Jul 2 08:45:31.275337 systemd[1]: Started session-18.scope. Jul 2 08:45:31.289000 audit[4639]: USER_START pid=4639 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:31.293000 audit[4642]: CRED_ACQ pid=4642 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:32.833778 sshd[4639]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:32.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.178:22-172.24.4.1:44144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:32.838039 systemd[1]: Started sshd@18-172.24.4.178:22-172.24.4.1:44144.service. Jul 2 08:45:32.841000 audit[4639]: USER_END pid=4639 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:32.842000 audit[4639]: CRED_DISP pid=4639 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:32.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.178:22-172.24.4.1:44138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:32.845453 systemd[1]: sshd@17-172.24.4.178:22-172.24.4.1:44138.service: Deactivated successfully. Jul 2 08:45:32.847800 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 08:45:32.849294 systemd-logind[1133]: Session 18 logged out. Waiting for processes to exit. Jul 2 08:45:32.853165 systemd-logind[1133]: Removed session 18. Jul 2 08:45:33.996000 audit[4310]: AVC avc: denied { watch } for pid=4310 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_44_26.612509610/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c685,c772 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c685,c772 tclass=file permissive=0 Jul 2 08:45:33.996000 audit[4310]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018b22c0 a2=fc6 a3=0 items=0 ppid=4190 pid=4310 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c685,c772 key=(null) Jul 2 08:45:33.996000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:45:34.201676 sshd[4649]: Accepted publickey for core from 172.24.4.1 port 44144 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:34.200000 audit[4649]: USER_ACCT pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:34.205000 audit[4649]: CRED_ACQ pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:34.205000 audit[4649]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd392b3dd0 a2=3 a3=0 items=0 ppid=1 pid=4649 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:34.205000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:34.207438 sshd[4649]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:34.219938 systemd-logind[1133]: New session 19 of user core. Jul 2 08:45:34.223788 systemd[1]: Started session-19.scope. Jul 2 08:45:34.239000 audit[4649]: USER_START pid=4649 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:34.242000 audit[4658]: CRED_ACQ pid=4658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:34.272000 audit[4270]: AVC avc: denied { watch } for pid=4270 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_08_44_26.2406956723/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c430,c989 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c430,c989 tclass=file permissive=0 Jul 2 08:45:34.272000 audit[4270]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0017e02c0 a2=fc6 a3=0 items=0 ppid=4140 pid=4270 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c430,c989 key=(null) Jul 2 08:45:34.272000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 08:45:35.049560 sshd[4649]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:35.052000 audit[4649]: USER_END pid=4649 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:35.067435 kernel: kauditd_printk_skb: 30 callbacks suppressed Jul 2 08:45:35.067659 kernel: audit: type=1106 audit(1719909935.052:1343): pid=4649 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:35.052000 audit[4649]: CRED_DISP pid=4649 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:35.069403 systemd-logind[1133]: Session 19 logged out. Waiting for processes to exit. Jul 2 08:45:35.073039 systemd[1]: sshd@18-172.24.4.178:22-172.24.4.1:44144.service: Deactivated successfully. Jul 2 08:45:35.074742 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 08:45:35.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.178:22-172.24.4.1:44144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:35.079368 systemd-logind[1133]: Removed session 19. Jul 2 08:45:35.088557 kernel: audit: type=1104 audit(1719909935.052:1344): pid=4649 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:35.088785 kernel: audit: type=1131 audit(1719909935.072:1345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.178:22-172.24.4.1:44144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:39.987000 audit[4675]: NETFILTER_CFG table=filter:126 family=2 entries=20 op=nft_register_rule pid=4675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:39.987000 audit[4675]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcb83be4e0 a2=0 a3=7ffcb83be4cc items=0 ppid=2179 pid=4675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:40.010074 kernel: audit: type=1325 audit(1719909939.987:1346): table=filter:126 family=2 entries=20 op=nft_register_rule pid=4675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:40.010307 kernel: audit: type=1300 audit(1719909939.987:1346): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcb83be4e0 a2=0 a3=7ffcb83be4cc items=0 ppid=2179 pid=4675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:39.987000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:40.017178 kernel: audit: type=1327 audit(1719909939.987:1346): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:40.001000 audit[4675]: NETFILTER_CFG table=nat:127 family=2 entries=106 op=nft_register_chain pid=4675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:40.001000 audit[4675]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffcb83be4e0 a2=0 a3=7ffcb83be4cc items=0 ppid=2179 pid=4675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:40.028287 kernel: audit: type=1325 audit(1719909940.001:1347): table=nat:127 family=2 entries=106 op=nft_register_chain pid=4675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 08:45:40.028419 kernel: audit: type=1300 audit(1719909940.001:1347): arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffcb83be4e0 a2=0 a3=7ffcb83be4cc items=0 ppid=2179 pid=4675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:40.028515 kernel: audit: type=1327 audit(1719909940.001:1347): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:40.001000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 08:45:40.064288 systemd[1]: Started sshd@19-172.24.4.178:22-172.24.4.1:48562.service. Jul 2 08:45:40.064000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.178:22-172.24.4.1:48562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:40.070558 kernel: audit: type=1130 audit(1719909940.064:1348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.178:22-172.24.4.1:48562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:41.145000 audit[4678]: USER_ACCT pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.145964 sshd[4678]: Accepted publickey for core from 172.24.4.1 port 48562 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:41.160521 kernel: audit: type=1101 audit(1719909941.145:1349): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.160672 kernel: audit: type=1103 audit(1719909941.159:1350): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.159000 audit[4678]: CRED_ACQ pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.162448 sshd[4678]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:41.201582 kernel: audit: type=1006 audit(1719909941.160:1351): pid=4678 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 2 08:45:41.160000 audit[4678]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe910597b0 a2=3 a3=0 items=0 ppid=1 pid=4678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:41.225731 kernel: audit: type=1300 audit(1719909941.160:1351): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe910597b0 a2=3 a3=0 items=0 ppid=1 pid=4678 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:41.160000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:41.230557 kernel: audit: type=1327 audit(1719909941.160:1351): proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:41.234211 systemd-logind[1133]: New session 20 of user core. Jul 2 08:45:41.235021 systemd[1]: Started session-20.scope. Jul 2 08:45:41.249000 audit[4678]: USER_START pid=4678 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.256632 kernel: audit: type=1105 audit(1719909941.249:1352): pid=4678 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.256927 kernel: audit: type=1103 audit(1719909941.255:1353): pid=4680 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:41.255000 audit[4680]: CRED_ACQ pid=4680 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:42.076658 sshd[4678]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:42.077000 audit[4678]: USER_END pid=4678 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:42.083525 kernel: audit: type=1106 audit(1719909942.077:1354): pid=4678 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:42.077000 audit[4678]: CRED_DISP pid=4678 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:42.084675 systemd[1]: sshd@19-172.24.4.178:22-172.24.4.1:48562.service: Deactivated successfully. Jul 2 08:45:42.085680 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 08:45:42.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.178:22-172.24.4.1:48562 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:42.094579 kernel: audit: type=1104 audit(1719909942.077:1355): pid=4678 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:42.095305 systemd-logind[1133]: Session 20 logged out. Waiting for processes to exit. Jul 2 08:45:42.097047 systemd-logind[1133]: Removed session 20. Jul 2 08:45:43.773579 systemd[1]: run-containerd-runc-k8s.io-29fd92caccc258d8c07ca4ed8e433d453da54de0ca80df358b714e89c95844e7-runc.K8yLND.mount: Deactivated successfully. Jul 2 08:45:47.086961 systemd[1]: Started sshd@20-172.24.4.178:22-172.24.4.1:49856.service. Jul 2 08:45:47.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.178:22-172.24.4.1:49856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:47.090932 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:45:47.091136 kernel: audit: type=1130 audit(1719909947.086:1357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.178:22-172.24.4.1:49856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:48.514000 audit[4722]: USER_ACCT pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.515075 sshd[4722]: Accepted publickey for core from 172.24.4.1 port 49856 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:48.527000 audit[4722]: CRED_ACQ pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.540384 kernel: audit: type=1101 audit(1719909948.514:1358): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.540722 kernel: audit: type=1103 audit(1719909948.527:1359): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.527000 audit[4722]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe72974b0 a2=3 a3=0 items=0 ppid=1 pid=4722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:48.548187 sshd[4722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:48.559047 kernel: audit: type=1006 audit(1719909948.527:1360): pid=4722 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 2 08:45:48.559162 kernel: audit: type=1300 audit(1719909948.527:1360): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe72974b0 a2=3 a3=0 items=0 ppid=1 pid=4722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:48.560145 kernel: audit: type=1327 audit(1719909948.527:1360): proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:48.527000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:48.570722 systemd-logind[1133]: New session 21 of user core. Jul 2 08:45:48.573412 systemd[1]: Started session-21.scope. Jul 2 08:45:48.585000 audit[4722]: USER_START pid=4722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.585000 audit[4731]: CRED_ACQ pid=4731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.609163 kernel: audit: type=1105 audit(1719909948.585:1361): pid=4722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:48.609279 kernel: audit: type=1103 audit(1719909948.585:1362): pid=4731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:49.319086 sshd[4722]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:49.321000 audit[4722]: USER_END pid=4722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:49.336557 kernel: audit: type=1106 audit(1719909949.321:1363): pid=4722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:49.321000 audit[4722]: CRED_DISP pid=4722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:49.337032 systemd[1]: sshd@20-172.24.4.178:22-172.24.4.1:49856.service: Deactivated successfully. Jul 2 08:45:49.340184 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 08:45:49.350554 kernel: audit: type=1104 audit(1719909949.321:1364): pid=4722 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:49.351974 systemd-logind[1133]: Session 21 logged out. Waiting for processes to exit. Jul 2 08:45:49.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.178:22-172.24.4.1:49856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:49.354850 systemd-logind[1133]: Removed session 21. Jul 2 08:45:54.332000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.178:22-172.24.4.1:49872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:54.332233 systemd[1]: Started sshd@21-172.24.4.178:22-172.24.4.1:49872.service. Jul 2 08:45:54.337682 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:45:54.337763 kernel: audit: type=1130 audit(1719909954.332:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.178:22-172.24.4.1:49872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:55.656000 audit[4740]: USER_ACCT pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.658082 sshd[4740]: Accepted publickey for core from 172.24.4.1 port 49872 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:45:55.667000 audit[4740]: CRED_ACQ pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.669212 sshd[4740]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:45:55.678603 kernel: audit: type=1101 audit(1719909955.656:1367): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.678785 kernel: audit: type=1103 audit(1719909955.667:1368): pid=4740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.685779 kernel: audit: type=1006 audit(1719909955.667:1369): pid=4740 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 2 08:45:55.667000 audit[4740]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf423c780 a2=3 a3=0 items=0 ppid=1 pid=4740 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:55.697032 kernel: audit: type=1300 audit(1719909955.667:1369): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf423c780 a2=3 a3=0 items=0 ppid=1 pid=4740 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:45:55.698603 kernel: audit: type=1327 audit(1719909955.667:1369): proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:55.667000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:45:55.712562 systemd-logind[1133]: New session 22 of user core. Jul 2 08:45:55.715972 systemd[1]: Started session-22.scope. Jul 2 08:45:55.731000 audit[4740]: USER_START pid=4740 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.749112 kernel: audit: type=1105 audit(1719909955.731:1370): pid=4740 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.749308 kernel: audit: type=1103 audit(1719909955.746:1371): pid=4742 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:55.746000 audit[4742]: CRED_ACQ pid=4742 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:56.026647 systemd[1]: run-containerd-runc-k8s.io-e6e65592b23f7a03f121fbdca5afab813e4216c42bbc2b02497567d8db504fd1-runc.3LH93R.mount: Deactivated successfully. Jul 2 08:45:56.485102 sshd[4740]: pam_unix(sshd:session): session closed for user core Jul 2 08:45:56.486000 audit[4740]: USER_END pid=4740 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:56.501566 kernel: audit: type=1106 audit(1719909956.486:1372): pid=4740 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:56.487000 audit[4740]: CRED_DISP pid=4740 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:56.513198 kernel: audit: type=1104 audit(1719909956.487:1373): pid=4740 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:45:56.512827 systemd[1]: sshd@21-172.24.4.178:22-172.24.4.1:49872.service: Deactivated successfully. Jul 2 08:45:56.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.178:22-172.24.4.1:49872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:45:56.514879 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 08:45:56.516884 systemd-logind[1133]: Session 22 logged out. Waiting for processes to exit. Jul 2 08:45:56.520921 systemd-logind[1133]: Removed session 22. Jul 2 08:46:01.497968 systemd[1]: Started sshd@22-172.24.4.178:22-172.24.4.1:32904.service. Jul 2 08:46:01.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.178:22-172.24.4.1:32904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:46:01.502066 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:46:01.502200 kernel: audit: type=1130 audit(1719909961.498:1375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.178:22-172.24.4.1:32904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:46:02.774000 audit[4800]: USER_ACCT pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.777199 sshd[4800]: Accepted publickey for core from 172.24.4.1 port 32904 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:46:02.786541 kernel: audit: type=1101 audit(1719909962.774:1376): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.814412 kernel: audit: type=1103 audit(1719909962.785:1377): pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.814627 kernel: audit: type=1006 audit(1719909962.785:1378): pid=4800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 2 08:46:02.831342 kernel: audit: type=1300 audit(1719909962.785:1378): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeda890840 a2=3 a3=0 items=0 ppid=1 pid=4800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:46:02.831709 kernel: audit: type=1327 audit(1719909962.785:1378): proctitle=737368643A20636F7265205B707269765D Jul 2 08:46:02.785000 audit[4800]: CRED_ACQ pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.785000 audit[4800]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeda890840 a2=3 a3=0 items=0 ppid=1 pid=4800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:46:02.785000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:46:02.831787 sshd[4800]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:46:02.871057 systemd-logind[1133]: New session 23 of user core. Jul 2 08:46:02.872610 systemd[1]: Started session-23.scope. Jul 2 08:46:02.884000 audit[4800]: USER_START pid=4800 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.898770 kernel: audit: type=1105 audit(1719909962.884:1379): pid=4800 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.899094 kernel: audit: type=1103 audit(1719909962.897:1380): pid=4802 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:02.897000 audit[4802]: CRED_ACQ pid=4802 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:03.811755 sshd[4800]: pam_unix(sshd:session): session closed for user core Jul 2 08:46:03.813000 audit[4800]: USER_END pid=4800 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:03.831613 kernel: audit: type=1106 audit(1719909963.813:1381): pid=4800 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:03.831791 kernel: audit: type=1104 audit(1719909963.813:1382): pid=4800 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:03.813000 audit[4800]: CRED_DISP pid=4800 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:03.832760 systemd[1]: sshd@22-172.24.4.178:22-172.24.4.1:32904.service: Deactivated successfully. Jul 2 08:46:03.834073 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 08:46:03.837153 systemd-logind[1133]: Session 23 logged out. Waiting for processes to exit. Jul 2 08:46:03.839279 systemd-logind[1133]: Removed session 23. Jul 2 08:46:03.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.178:22-172.24.4.1:32904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:46:08.824312 systemd[1]: Started sshd@23-172.24.4.178:22-172.24.4.1:36390.service. Jul 2 08:46:08.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.178:22-172.24.4.1:36390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:46:08.830383 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:46:08.830542 kernel: audit: type=1130 audit(1719909968.825:1384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.178:22-172.24.4.1:36390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:46:10.229000 audit[4818]: USER_ACCT pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.233051 sshd[4818]: Accepted publickey for core from 172.24.4.1 port 36390 ssh2: RSA SHA256:VdsmefeXTJb2AXrBK1NRbWKUCaaQF5AjdY0e7XHYE0Q Jul 2 08:46:10.241562 kernel: audit: type=1101 audit(1719909970.229:1385): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.241000 audit[4818]: CRED_ACQ pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.244620 sshd[4818]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 08:46:10.253667 kernel: audit: type=1103 audit(1719909970.241:1386): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.242000 audit[4818]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5e0a8e00 a2=3 a3=0 items=0 ppid=1 pid=4818 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:46:10.272282 kernel: audit: type=1006 audit(1719909970.242:1387): pid=4818 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 08:46:10.272400 kernel: audit: type=1300 audit(1719909970.242:1387): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5e0a8e00 a2=3 a3=0 items=0 ppid=1 pid=4818 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 08:46:10.275576 kernel: audit: type=1327 audit(1719909970.242:1387): proctitle=737368643A20636F7265205B707269765D Jul 2 08:46:10.242000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 08:46:10.279105 systemd-logind[1133]: New session 24 of user core. Jul 2 08:46:10.280261 systemd[1]: Started session-24.scope. Jul 2 08:46:10.293000 audit[4818]: USER_START pid=4818 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.308971 kernel: audit: type=1105 audit(1719909970.293:1388): pid=4818 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.308000 audit[4820]: CRED_ACQ pid=4820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:10.315545 kernel: audit: type=1103 audit(1719909970.308:1389): pid=4820 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:11.399952 sshd[4818]: pam_unix(sshd:session): session closed for user core Jul 2 08:46:11.402000 audit[4818]: USER_END pid=4818 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:11.406654 systemd[1]: sshd@23-172.24.4.178:22-172.24.4.1:36390.service: Deactivated successfully. Jul 2 08:46:11.408354 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 08:46:11.402000 audit[4818]: CRED_DISP pid=4818 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:11.435089 kernel: audit: type=1106 audit(1719909971.402:1390): pid=4818 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:11.435242 kernel: audit: type=1104 audit(1719909971.402:1391): pid=4818 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Jul 2 08:46:11.435163 systemd-logind[1133]: Session 24 logged out. Waiting for processes to exit. Jul 2 08:46:11.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.178:22-172.24.4.1:36390 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 08:46:11.437341 systemd-logind[1133]: Removed session 24. Jul 2 08:46:16.186000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:16.189544 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 2 08:46:16.189728 kernel: audit: type=1400 audit(1719909976.186:1393): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:16.200693 kernel: audit: type=1400 audit(1719909976.187:1394): avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:16.187000 audit[1895]: AVC avc: denied { watch } for pid=1895 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:16.187000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001a3d8e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:46:16.224644 kernel: audit: type=1300 audit(1719909976.187:1394): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001a3d8e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:46:16.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:46:16.236661 kernel: audit: type=1327 audit(1719909976.187:1394): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:46:16.186000 audit[1895]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011539b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:46:16.253038 kernel: audit: type=1300 audit(1719909976.186:1393): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011539b0 a2=fc6 a3=0 items=0 ppid=1735 pid=1895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c847,c882 key=(null) Jul 2 08:46:16.253372 kernel: audit: type=1327 audit(1719909976.186:1393): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:46:16.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 08:46:17.021000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:17.021000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:17.047708 kernel: audit: type=1400 audit(1719909977.021:1395): avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=526904 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:17.047861 kernel: audit: type=1400 audit(1719909977.021:1396): avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=526900 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:17.047925 kernel: audit: type=1300 audit(1719909977.021:1396): arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00a67f0e0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:46:17.021000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00a67f0e0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:46:17.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:46:17.075322 kernel: audit: type=1327 audit(1719909977.021:1396): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:46:17.021000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c009cecd20 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null) Jul 2 08:46:17.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E313738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Jul 2 08:46:17.021000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=526898 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 08:46:17.021000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c00431dea0 a2=fc6 a3=0 items=0 ppid=1697 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c439 key=(null)