Jul 2 07:46:33.828982 kernel: Linux version 5.15.161-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 1 23:45:21 -00 2024 Jul 2 07:46:33.829000 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:46:33.829009 kernel: BIOS-provided physical RAM map: Jul 2 07:46:33.829015 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 2 07:46:33.829020 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 2 07:46:33.829025 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 2 07:46:33.829032 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 2 07:46:33.829037 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 2 07:46:33.829043 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 2 07:46:33.829049 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 2 07:46:33.829055 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 2 07:46:33.829060 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 2 07:46:33.829065 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 2 07:46:33.829071 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 2 07:46:33.829078 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 2 07:46:33.829085 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 2 07:46:33.829091 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 2 07:46:33.829096 kernel: NX (Execute Disable) protection: active Jul 2 07:46:33.829102 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Jul 2 07:46:33.829108 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Jul 2 07:46:33.829114 kernel: e820: update [mem 0x9b1a5018-0x9b1e1e57] usable ==> usable Jul 2 07:46:33.829119 kernel: e820: update [mem 0x9b1a5018-0x9b1e1e57] usable ==> usable Jul 2 07:46:33.829125 kernel: extended physical RAM map: Jul 2 07:46:33.829131 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 2 07:46:33.829137 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 2 07:46:33.829143 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 2 07:46:33.829149 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 2 07:46:33.829155 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 2 07:46:33.829161 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 2 07:46:33.829166 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 2 07:46:33.829172 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b1a5017] usable Jul 2 07:46:33.829178 kernel: reserve setup_data: [mem 0x000000009b1a5018-0x000000009b1e1e57] usable Jul 2 07:46:33.829183 kernel: reserve setup_data: [mem 0x000000009b1e1e58-0x000000009b3f7017] usable Jul 2 07:46:33.829189 kernel: reserve setup_data: [mem 0x000000009b3f7018-0x000000009b400c57] usable Jul 2 07:46:33.829195 kernel: reserve setup_data: [mem 0x000000009b400c58-0x000000009c8eefff] usable Jul 2 07:46:33.829200 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 2 07:46:33.829207 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 2 07:46:33.829213 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 2 07:46:33.829219 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 2 07:46:33.829225 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 2 07:46:33.829233 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 2 07:46:33.829239 kernel: efi: EFI v2.70 by EDK II Jul 2 07:46:33.829245 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b772018 RNG=0x9cb75018 Jul 2 07:46:33.829253 kernel: random: crng init done Jul 2 07:46:33.829259 kernel: SMBIOS 2.8 present. Jul 2 07:46:33.829265 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 Jul 2 07:46:33.829271 kernel: Hypervisor detected: KVM Jul 2 07:46:33.829277 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 2 07:46:33.829284 kernel: kvm-clock: cpu 0, msr 67192001, primary cpu clock Jul 2 07:46:33.829290 kernel: kvm-clock: using sched offset of 4215574449 cycles Jul 2 07:46:33.829297 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 2 07:46:33.829303 kernel: tsc: Detected 2794.748 MHz processor Jul 2 07:46:33.829324 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 2 07:46:33.829331 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 2 07:46:33.829337 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 2 07:46:33.829343 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 2 07:46:33.829350 kernel: Using GB pages for direct mapping Jul 2 07:46:33.829356 kernel: Secure boot disabled Jul 2 07:46:33.829362 kernel: ACPI: Early table checksum verification disabled Jul 2 07:46:33.829369 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 2 07:46:33.829375 kernel: ACPI: XSDT 0x000000009CB7D0E8 00004C (v01 BOCHS BXPC 00000001 01000013) Jul 2 07:46:33.829383 kernel: ACPI: FACP 0x000000009CB7A000 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:46:33.829389 kernel: ACPI: DSDT 0x000000009CB7B000 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:46:33.829395 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 2 07:46:33.829402 kernel: ACPI: APIC 0x000000009CB79000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:46:33.829408 kernel: ACPI: HPET 0x000000009CB78000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:46:33.829415 kernel: ACPI: WAET 0x000000009CB77000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 2 07:46:33.829421 kernel: ACPI: BGRT 0x000000009CB76000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 2 07:46:33.829427 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb7a000-0x9cb7a073] Jul 2 07:46:33.829434 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7b000-0x9cb7ca38] Jul 2 07:46:33.829441 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 2 07:46:33.829447 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb79000-0x9cb7908f] Jul 2 07:46:33.829454 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb78000-0x9cb78037] Jul 2 07:46:33.829460 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb77000-0x9cb77027] Jul 2 07:46:33.829466 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb76000-0x9cb76037] Jul 2 07:46:33.829473 kernel: No NUMA configuration found Jul 2 07:46:33.829479 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 2 07:46:33.829485 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 2 07:46:33.829492 kernel: Zone ranges: Jul 2 07:46:33.829499 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 2 07:46:33.829506 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 2 07:46:33.829512 kernel: Normal empty Jul 2 07:46:33.829518 kernel: Movable zone start for each node Jul 2 07:46:33.829525 kernel: Early memory node ranges Jul 2 07:46:33.829531 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 2 07:46:33.829537 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 2 07:46:33.829543 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 2 07:46:33.829550 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 2 07:46:33.829557 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 2 07:46:33.829564 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 2 07:46:33.829570 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 2 07:46:33.829576 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 07:46:33.829583 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 2 07:46:33.829589 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 2 07:46:33.829595 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 2 07:46:33.829601 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 2 07:46:33.829608 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 2 07:46:33.829615 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 2 07:46:33.829621 kernel: ACPI: PM-Timer IO Port: 0xb008 Jul 2 07:46:33.829628 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 2 07:46:33.829634 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 2 07:46:33.829640 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 2 07:46:33.829646 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 2 07:46:33.829653 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 2 07:46:33.829659 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 2 07:46:33.829665 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 2 07:46:33.829672 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 2 07:46:33.829679 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 2 07:46:33.829685 kernel: TSC deadline timer available Jul 2 07:46:33.829692 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 2 07:46:33.829698 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 2 07:46:33.829704 kernel: kvm-guest: setup PV sched yield Jul 2 07:46:33.829710 kernel: [mem 0x9d000000-0xffffffff] available for PCI devices Jul 2 07:46:33.829717 kernel: Booting paravirtualized kernel on KVM Jul 2 07:46:33.829731 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 2 07:46:33.829738 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 2 07:46:33.829745 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 2 07:46:33.829752 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 2 07:46:33.829762 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 2 07:46:33.829770 kernel: kvm-guest: setup async PF for cpu 0 Jul 2 07:46:33.829777 kernel: kvm-guest: stealtime: cpu 0, msr 9ae1c0c0 Jul 2 07:46:33.829784 kernel: kvm-guest: PV spinlocks enabled Jul 2 07:46:33.829790 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 2 07:46:33.829797 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 2 07:46:33.829803 kernel: Policy zone: DMA32 Jul 2 07:46:33.829811 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:46:33.829818 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 2 07:46:33.829826 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 2 07:46:33.829833 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 2 07:46:33.829839 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 2 07:46:33.829847 kernel: Memory: 2398392K/2567000K available (12294K kernel code, 2276K rwdata, 13712K rodata, 47444K init, 4144K bss, 168348K reserved, 0K cma-reserved) Jul 2 07:46:33.829854 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 2 07:46:33.829861 kernel: ftrace: allocating 34514 entries in 135 pages Jul 2 07:46:33.829868 kernel: ftrace: allocated 135 pages with 4 groups Jul 2 07:46:33.829875 kernel: rcu: Hierarchical RCU implementation. Jul 2 07:46:33.829882 kernel: rcu: RCU event tracing is enabled. Jul 2 07:46:33.829889 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 2 07:46:33.829896 kernel: Rude variant of Tasks RCU enabled. Jul 2 07:46:33.829902 kernel: Tracing variant of Tasks RCU enabled. Jul 2 07:46:33.829909 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 2 07:46:33.829916 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 2 07:46:33.829924 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 2 07:46:33.829930 kernel: Console: colour dummy device 80x25 Jul 2 07:46:33.829937 kernel: printk: console [ttyS0] enabled Jul 2 07:46:33.829944 kernel: ACPI: Core revision 20210730 Jul 2 07:46:33.829951 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 2 07:46:33.829957 kernel: APIC: Switch to symmetric I/O mode setup Jul 2 07:46:33.829964 kernel: x2apic enabled Jul 2 07:46:33.829971 kernel: Switched APIC routing to physical x2apic. Jul 2 07:46:33.829978 kernel: kvm-guest: setup PV IPIs Jul 2 07:46:33.829985 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 2 07:46:33.829992 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 2 07:46:33.829999 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Jul 2 07:46:33.830006 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 2 07:46:33.830012 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 2 07:46:33.830019 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 2 07:46:33.830026 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 2 07:46:33.830032 kernel: Spectre V2 : Mitigation: Retpolines Jul 2 07:46:33.830039 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Jul 2 07:46:33.830047 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Jul 2 07:46:33.830054 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 2 07:46:33.830060 kernel: RETBleed: Mitigation: untrained return thunk Jul 2 07:46:33.830067 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 2 07:46:33.830074 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 2 07:46:33.830081 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 2 07:46:33.830087 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 2 07:46:33.830094 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 2 07:46:33.830101 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 2 07:46:33.830109 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 2 07:46:33.830115 kernel: Freeing SMP alternatives memory: 32K Jul 2 07:46:33.830122 kernel: pid_max: default: 32768 minimum: 301 Jul 2 07:46:33.830129 kernel: LSM: Security Framework initializing Jul 2 07:46:33.830135 kernel: SELinux: Initializing. Jul 2 07:46:33.830142 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 07:46:33.830149 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 2 07:46:33.830156 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 2 07:46:33.830163 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 2 07:46:33.830170 kernel: ... version: 0 Jul 2 07:46:33.830177 kernel: ... bit width: 48 Jul 2 07:46:33.830183 kernel: ... generic registers: 6 Jul 2 07:46:33.830190 kernel: ... value mask: 0000ffffffffffff Jul 2 07:46:33.830197 kernel: ... max period: 00007fffffffffff Jul 2 07:46:33.830204 kernel: ... fixed-purpose events: 0 Jul 2 07:46:33.830210 kernel: ... event mask: 000000000000003f Jul 2 07:46:33.830217 kernel: signal: max sigframe size: 1776 Jul 2 07:46:33.830223 kernel: rcu: Hierarchical SRCU implementation. Jul 2 07:46:33.830231 kernel: smp: Bringing up secondary CPUs ... Jul 2 07:46:33.830238 kernel: x86: Booting SMP configuration: Jul 2 07:46:33.830244 kernel: .... node #0, CPUs: #1 Jul 2 07:46:33.830251 kernel: kvm-clock: cpu 1, msr 67192041, secondary cpu clock Jul 2 07:46:33.830258 kernel: kvm-guest: setup async PF for cpu 1 Jul 2 07:46:33.830264 kernel: kvm-guest: stealtime: cpu 1, msr 9ae9c0c0 Jul 2 07:46:33.830271 kernel: #2 Jul 2 07:46:33.830278 kernel: kvm-clock: cpu 2, msr 67192081, secondary cpu clock Jul 2 07:46:33.830284 kernel: kvm-guest: setup async PF for cpu 2 Jul 2 07:46:33.830292 kernel: kvm-guest: stealtime: cpu 2, msr 9af1c0c0 Jul 2 07:46:33.830299 kernel: #3 Jul 2 07:46:33.830305 kernel: kvm-clock: cpu 3, msr 671920c1, secondary cpu clock Jul 2 07:46:33.830341 kernel: kvm-guest: setup async PF for cpu 3 Jul 2 07:46:33.830348 kernel: kvm-guest: stealtime: cpu 3, msr 9af9c0c0 Jul 2 07:46:33.830355 kernel: smp: Brought up 1 node, 4 CPUs Jul 2 07:46:33.830361 kernel: smpboot: Max logical packages: 1 Jul 2 07:46:33.830368 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Jul 2 07:46:33.830375 kernel: devtmpfs: initialized Jul 2 07:46:33.830383 kernel: x86/mm: Memory block size: 128MB Jul 2 07:46:33.830390 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 2 07:46:33.830396 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 2 07:46:33.830403 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 2 07:46:33.830410 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 2 07:46:33.830417 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 2 07:46:33.830424 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 2 07:46:33.830430 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 2 07:46:33.830437 kernel: pinctrl core: initialized pinctrl subsystem Jul 2 07:46:33.830445 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 2 07:46:33.830452 kernel: audit: initializing netlink subsys (disabled) Jul 2 07:46:33.830458 kernel: audit: type=2000 audit(1719906393.354:1): state=initialized audit_enabled=0 res=1 Jul 2 07:46:33.830465 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 2 07:46:33.830472 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 2 07:46:33.830478 kernel: cpuidle: using governor menu Jul 2 07:46:33.830485 kernel: ACPI: bus type PCI registered Jul 2 07:46:33.830492 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 2 07:46:33.830498 kernel: dca service started, version 1.12.1 Jul 2 07:46:33.830506 kernel: PCI: Using configuration type 1 for base access Jul 2 07:46:33.830513 kernel: PCI: Using configuration type 1 for extended access Jul 2 07:46:33.830519 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 2 07:46:33.830526 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 2 07:46:33.830533 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 2 07:46:33.830539 kernel: ACPI: Added _OSI(Module Device) Jul 2 07:46:33.830546 kernel: ACPI: Added _OSI(Processor Device) Jul 2 07:46:33.830553 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Jul 2 07:46:33.830559 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 2 07:46:33.830567 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 2 07:46:33.830574 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 2 07:46:33.830580 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 2 07:46:33.830587 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 2 07:46:33.830594 kernel: ACPI: Interpreter enabled Jul 2 07:46:33.830601 kernel: ACPI: PM: (supports S0 S3 S5) Jul 2 07:46:33.830607 kernel: ACPI: Using IOAPIC for interrupt routing Jul 2 07:46:33.830614 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 2 07:46:33.830621 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Jul 2 07:46:33.830629 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 2 07:46:33.830755 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 2 07:46:33.830767 kernel: acpiphp: Slot [3] registered Jul 2 07:46:33.830774 kernel: acpiphp: Slot [4] registered Jul 2 07:46:33.830781 kernel: acpiphp: Slot [5] registered Jul 2 07:46:33.830787 kernel: acpiphp: Slot [6] registered Jul 2 07:46:33.830794 kernel: acpiphp: Slot [7] registered Jul 2 07:46:33.830801 kernel: acpiphp: Slot [8] registered Jul 2 07:46:33.830809 kernel: acpiphp: Slot [9] registered Jul 2 07:46:33.830816 kernel: acpiphp: Slot [10] registered Jul 2 07:46:33.830822 kernel: acpiphp: Slot [11] registered Jul 2 07:46:33.830829 kernel: acpiphp: Slot [12] registered Jul 2 07:46:33.830836 kernel: acpiphp: Slot [13] registered Jul 2 07:46:33.830843 kernel: acpiphp: Slot [14] registered Jul 2 07:46:33.830849 kernel: acpiphp: Slot [15] registered Jul 2 07:46:33.830856 kernel: acpiphp: Slot [16] registered Jul 2 07:46:33.830862 kernel: acpiphp: Slot [17] registered Jul 2 07:46:33.830869 kernel: acpiphp: Slot [18] registered Jul 2 07:46:33.830877 kernel: acpiphp: Slot [19] registered Jul 2 07:46:33.830883 kernel: acpiphp: Slot [20] registered Jul 2 07:46:33.830890 kernel: acpiphp: Slot [21] registered Jul 2 07:46:33.830897 kernel: acpiphp: Slot [22] registered Jul 2 07:46:33.830903 kernel: acpiphp: Slot [23] registered Jul 2 07:46:33.830910 kernel: acpiphp: Slot [24] registered Jul 2 07:46:33.830916 kernel: acpiphp: Slot [25] registered Jul 2 07:46:33.830923 kernel: acpiphp: Slot [26] registered Jul 2 07:46:33.830929 kernel: acpiphp: Slot [27] registered Jul 2 07:46:33.830937 kernel: acpiphp: Slot [28] registered Jul 2 07:46:33.830944 kernel: acpiphp: Slot [29] registered Jul 2 07:46:33.830950 kernel: acpiphp: Slot [30] registered Jul 2 07:46:33.830957 kernel: acpiphp: Slot [31] registered Jul 2 07:46:33.830964 kernel: PCI host bridge to bus 0000:00 Jul 2 07:46:33.831047 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 2 07:46:33.831113 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 2 07:46:33.831243 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 2 07:46:33.831375 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Jul 2 07:46:33.831437 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0x87fffffff window] Jul 2 07:46:33.831497 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 2 07:46:33.831577 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Jul 2 07:46:33.831652 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Jul 2 07:46:33.831737 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Jul 2 07:46:33.831809 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Jul 2 07:46:33.831877 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 2 07:46:33.831944 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 2 07:46:33.832011 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 2 07:46:33.832077 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 2 07:46:33.832151 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Jul 2 07:46:33.832218 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Jul 2 07:46:33.832287 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Jul 2 07:46:33.832395 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Jul 2 07:46:33.832464 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 2 07:46:33.832530 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xc1043000-0xc1043fff] Jul 2 07:46:33.832600 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 2 07:46:33.832668 kernel: pci 0000:00:02.0: BAR 0: assigned to efifb Jul 2 07:46:33.832745 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 2 07:46:33.832822 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Jul 2 07:46:33.832890 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc0a0-0xc0bf] Jul 2 07:46:33.832961 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 2 07:46:33.833030 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 2 07:46:33.833105 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Jul 2 07:46:33.833173 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Jul 2 07:46:33.833242 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 2 07:46:33.833324 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 2 07:46:33.833404 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Jul 2 07:46:33.833472 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] Jul 2 07:46:33.833539 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xc1040000-0xc1040fff] Jul 2 07:46:33.833609 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 2 07:46:33.833676 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 2 07:46:33.833685 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 2 07:46:33.833694 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 2 07:46:33.833701 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 2 07:46:33.833708 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 2 07:46:33.833715 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Jul 2 07:46:33.833730 kernel: iommu: Default domain type: Translated Jul 2 07:46:33.833737 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 2 07:46:33.833807 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Jul 2 07:46:33.833873 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 2 07:46:33.833941 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Jul 2 07:46:33.833952 kernel: vgaarb: loaded Jul 2 07:46:33.833959 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 2 07:46:33.833966 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 2 07:46:33.833973 kernel: PTP clock support registered Jul 2 07:46:33.833980 kernel: Registered efivars operations Jul 2 07:46:33.833986 kernel: PCI: Using ACPI for IRQ routing Jul 2 07:46:33.833993 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 2 07:46:33.833999 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 2 07:46:33.834006 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 2 07:46:33.834014 kernel: e820: reserve RAM buffer [mem 0x9b1a5018-0x9bffffff] Jul 2 07:46:33.834020 kernel: e820: reserve RAM buffer [mem 0x9b3f7018-0x9bffffff] Jul 2 07:46:33.834027 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 2 07:46:33.834033 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 2 07:46:33.834040 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 2 07:46:33.834047 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 2 07:46:33.834054 kernel: clocksource: Switched to clocksource kvm-clock Jul 2 07:46:33.834060 kernel: VFS: Disk quotas dquot_6.6.0 Jul 2 07:46:33.834067 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 2 07:46:33.834075 kernel: pnp: PnP ACPI init Jul 2 07:46:33.834148 kernel: pnp 00:02: [dma 2] Jul 2 07:46:33.834158 kernel: pnp: PnP ACPI: found 6 devices Jul 2 07:46:33.834165 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 2 07:46:33.834172 kernel: NET: Registered PF_INET protocol family Jul 2 07:46:33.834179 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 2 07:46:33.834186 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 2 07:46:33.834193 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 2 07:46:33.834212 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 2 07:46:33.834219 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 2 07:46:33.834226 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 2 07:46:33.834232 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 07:46:33.834239 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 2 07:46:33.834246 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 2 07:46:33.834253 kernel: NET: Registered PF_XDP protocol family Jul 2 07:46:33.834339 kernel: pci 0000:00:05.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 2 07:46:33.834421 kernel: pci 0000:00:05.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 2 07:46:33.834484 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 2 07:46:33.834545 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 2 07:46:33.834604 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 2 07:46:33.834663 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Jul 2 07:46:33.834729 kernel: pci_bus 0000:00: resource 8 [mem 0x800000000-0x87fffffff window] Jul 2 07:46:33.834800 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Jul 2 07:46:33.834869 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 2 07:46:33.834939 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Jul 2 07:46:33.834948 kernel: PCI: CLS 0 bytes, default 64 Jul 2 07:46:33.834955 kernel: Initialise system trusted keyrings Jul 2 07:46:33.834963 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 2 07:46:33.834970 kernel: Key type asymmetric registered Jul 2 07:46:33.834977 kernel: Asymmetric key parser 'x509' registered Jul 2 07:46:33.834984 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 2 07:46:33.834991 kernel: io scheduler mq-deadline registered Jul 2 07:46:33.835000 kernel: io scheduler kyber registered Jul 2 07:46:33.835007 kernel: io scheduler bfq registered Jul 2 07:46:33.835014 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 2 07:46:33.835022 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Jul 2 07:46:33.835029 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Jul 2 07:46:33.835036 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Jul 2 07:46:33.835043 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 2 07:46:33.835050 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 2 07:46:33.835058 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 2 07:46:33.835065 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 2 07:46:33.835073 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 2 07:46:33.835144 kernel: rtc_cmos 00:05: RTC can wake from S4 Jul 2 07:46:33.835156 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 2 07:46:33.835217 kernel: rtc_cmos 00:05: registered as rtc0 Jul 2 07:46:33.835280 kernel: rtc_cmos 00:05: setting system clock to 2024-07-02T07:46:33 UTC (1719906393) Jul 2 07:46:33.835356 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 2 07:46:33.835366 kernel: efifb: probing for efifb Jul 2 07:46:33.835373 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 2 07:46:33.835380 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 2 07:46:33.835387 kernel: efifb: scrolling: redraw Jul 2 07:46:33.835394 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 2 07:46:33.835401 kernel: Console: switching to colour frame buffer device 160x50 Jul 2 07:46:33.835408 kernel: fb0: EFI VGA frame buffer device Jul 2 07:46:33.835418 kernel: pstore: Registered efi as persistent store backend Jul 2 07:46:33.835425 kernel: NET: Registered PF_INET6 protocol family Jul 2 07:46:33.835432 kernel: Segment Routing with IPv6 Jul 2 07:46:33.835439 kernel: In-situ OAM (IOAM) with IPv6 Jul 2 07:46:33.835446 kernel: NET: Registered PF_PACKET protocol family Jul 2 07:46:33.835453 kernel: Key type dns_resolver registered Jul 2 07:46:33.835460 kernel: IPI shorthand broadcast: enabled Jul 2 07:46:33.835467 kernel: sched_clock: Marking stable (446367129, 137829446)->(629976100, -45779525) Jul 2 07:46:33.835474 kernel: registered taskstats version 1 Jul 2 07:46:33.835482 kernel: Loading compiled-in X.509 certificates Jul 2 07:46:33.835491 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.161-flatcar: a1ce693884775675566f1ed116e36d15950b9a42' Jul 2 07:46:33.835498 kernel: Key type .fscrypt registered Jul 2 07:46:33.835504 kernel: Key type fscrypt-provisioning registered Jul 2 07:46:33.835511 kernel: pstore: Using crash dump compression: deflate Jul 2 07:46:33.835519 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 2 07:46:33.835526 kernel: ima: Allocated hash algorithm: sha1 Jul 2 07:46:33.835533 kernel: ima: No architecture policies found Jul 2 07:46:33.835540 kernel: clk: Disabling unused clocks Jul 2 07:46:33.835548 kernel: Freeing unused kernel image (initmem) memory: 47444K Jul 2 07:46:33.835556 kernel: Write protecting the kernel read-only data: 28672k Jul 2 07:46:33.835563 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 2 07:46:33.835570 kernel: Freeing unused kernel image (rodata/data gap) memory: 624K Jul 2 07:46:33.835578 kernel: Run /init as init process Jul 2 07:46:33.835585 kernel: with arguments: Jul 2 07:46:33.835592 kernel: /init Jul 2 07:46:33.835598 kernel: with environment: Jul 2 07:46:33.835605 kernel: HOME=/ Jul 2 07:46:33.835614 kernel: TERM=linux Jul 2 07:46:33.835621 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 2 07:46:33.835630 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:46:33.835640 systemd[1]: Detected virtualization kvm. Jul 2 07:46:33.835648 systemd[1]: Detected architecture x86-64. Jul 2 07:46:33.835655 systemd[1]: Running in initrd. Jul 2 07:46:33.835662 systemd[1]: No hostname configured, using default hostname. Jul 2 07:46:33.835669 systemd[1]: Hostname set to . Jul 2 07:46:33.835678 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:46:33.835686 systemd[1]: Queued start job for default target initrd.target. Jul 2 07:46:33.835693 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:46:33.835700 systemd[1]: Reached target cryptsetup.target. Jul 2 07:46:33.835708 systemd[1]: Reached target paths.target. Jul 2 07:46:33.835715 systemd[1]: Reached target slices.target. Jul 2 07:46:33.835730 systemd[1]: Reached target swap.target. Jul 2 07:46:33.835737 systemd[1]: Reached target timers.target. Jul 2 07:46:33.835747 systemd[1]: Listening on iscsid.socket. Jul 2 07:46:33.835754 systemd[1]: Listening on iscsiuio.socket. Jul 2 07:46:33.835762 systemd[1]: Listening on systemd-journald-audit.socket. Jul 2 07:46:33.835769 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 2 07:46:33.835777 systemd[1]: Listening on systemd-journald.socket. Jul 2 07:46:33.835784 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:46:33.835792 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:46:33.835799 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:46:33.835808 systemd[1]: Reached target sockets.target. Jul 2 07:46:33.835815 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:46:33.835822 systemd[1]: Finished network-cleanup.service. Jul 2 07:46:33.835830 systemd[1]: Starting systemd-fsck-usr.service... Jul 2 07:46:33.835837 systemd[1]: Starting systemd-journald.service... Jul 2 07:46:33.835845 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:46:33.835852 systemd[1]: Starting systemd-resolved.service... Jul 2 07:46:33.835860 systemd[1]: Starting systemd-vconsole-setup.service... Jul 2 07:46:33.835867 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:46:33.835876 systemd[1]: Finished systemd-fsck-usr.service. Jul 2 07:46:33.835883 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 2 07:46:33.835890 systemd[1]: Finished systemd-vconsole-setup.service. Jul 2 07:46:33.835898 kernel: audit: type=1130 audit(1719906393.833:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.835908 systemd-journald[198]: Journal started Jul 2 07:46:33.835946 systemd-journald[198]: Runtime Journal (/run/log/journal/7f89a2422aba4798a5b47dad803d0360) is 6.0M, max 48.4M, 42.4M free. Jul 2 07:46:33.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.837343 systemd[1]: Started systemd-journald.service. Jul 2 07:46:33.838399 systemd-modules-load[199]: Inserted module 'overlay' Jul 2 07:46:33.847949 kernel: audit: type=1130 audit(1719906393.838:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.847973 kernel: audit: type=1130 audit(1719906393.840:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.838000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.838689 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 2 07:46:33.841433 systemd[1]: Starting dracut-cmdline-ask.service... Jul 2 07:46:33.858256 systemd[1]: Finished dracut-cmdline-ask.service. Jul 2 07:46:33.863964 kernel: audit: type=1130 audit(1719906393.858:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.858387 systemd-resolved[200]: Positive Trust Anchors: Jul 2 07:46:33.858397 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:46:33.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.858423 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:46:33.877885 kernel: audit: type=1130 audit(1719906393.864:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.859954 systemd[1]: Starting dracut-cmdline.service... Jul 2 07:46:33.860518 systemd-resolved[200]: Defaulting to hostname 'linux'. Jul 2 07:46:33.863530 systemd[1]: Started systemd-resolved.service. Jul 2 07:46:33.865285 systemd[1]: Reached target nss-lookup.target. Jul 2 07:46:33.883329 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 2 07:46:33.887949 dracut-cmdline[214]: dracut-dracut-053 Jul 2 07:46:33.889356 kernel: Bridge firewalling registered Jul 2 07:46:33.888639 systemd-modules-load[199]: Inserted module 'br_netfilter' Jul 2 07:46:33.891274 dracut-cmdline[214]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d29251fe942de56b08103b03939b6e5af4108e76dc6080fe2498c5db43f16e82 Jul 2 07:46:33.908346 kernel: SCSI subsystem initialized Jul 2 07:46:33.919521 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 2 07:46:33.919550 kernel: device-mapper: uevent: version 1.0.3 Jul 2 07:46:33.919563 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 2 07:46:33.923395 systemd-modules-load[199]: Inserted module 'dm_multipath' Jul 2 07:46:33.924044 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:46:33.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.925466 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:46:33.930430 kernel: audit: type=1130 audit(1719906393.924:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.934209 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:46:33.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.939334 kernel: audit: type=1130 audit(1719906393.934:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:33.956346 kernel: Loading iSCSI transport class v2.0-870. Jul 2 07:46:33.972344 kernel: iscsi: registered transport (tcp) Jul 2 07:46:33.993604 kernel: iscsi: registered transport (qla4xxx) Jul 2 07:46:33.993660 kernel: QLogic iSCSI HBA Driver Jul 2 07:46:34.021973 systemd[1]: Finished dracut-cmdline.service. Jul 2 07:46:34.027121 kernel: audit: type=1130 audit(1719906394.022:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.023849 systemd[1]: Starting dracut-pre-udev.service... Jul 2 07:46:34.069355 kernel: raid6: avx2x4 gen() 28388 MB/s Jul 2 07:46:34.086342 kernel: raid6: avx2x4 xor() 8181 MB/s Jul 2 07:46:34.103342 kernel: raid6: avx2x2 gen() 31669 MB/s Jul 2 07:46:34.120342 kernel: raid6: avx2x2 xor() 18765 MB/s Jul 2 07:46:34.137340 kernel: raid6: avx2x1 gen() 25833 MB/s Jul 2 07:46:34.154344 kernel: raid6: avx2x1 xor() 13392 MB/s Jul 2 07:46:34.171342 kernel: raid6: sse2x4 gen() 13757 MB/s Jul 2 07:46:34.188340 kernel: raid6: sse2x4 xor() 7237 MB/s Jul 2 07:46:34.205336 kernel: raid6: sse2x2 gen() 16312 MB/s Jul 2 07:46:34.222400 kernel: raid6: sse2x2 xor() 9857 MB/s Jul 2 07:46:34.239339 kernel: raid6: sse2x1 gen() 12338 MB/s Jul 2 07:46:34.256732 kernel: raid6: sse2x1 xor() 7787 MB/s Jul 2 07:46:34.256756 kernel: raid6: using algorithm avx2x2 gen() 31669 MB/s Jul 2 07:46:34.256806 kernel: raid6: .... xor() 18765 MB/s, rmw enabled Jul 2 07:46:34.257452 kernel: raid6: using avx2x2 recovery algorithm Jul 2 07:46:34.269336 kernel: xor: automatically using best checksumming function avx Jul 2 07:46:34.361353 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 2 07:46:34.370649 systemd[1]: Finished dracut-pre-udev.service. Jul 2 07:46:34.375619 kernel: audit: type=1130 audit(1719906394.371:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.375000 audit: BPF prog-id=7 op=LOAD Jul 2 07:46:34.375000 audit: BPF prog-id=8 op=LOAD Jul 2 07:46:34.375936 systemd[1]: Starting systemd-udevd.service... Jul 2 07:46:34.388196 systemd-udevd[400]: Using default interface naming scheme 'v252'. Jul 2 07:46:34.392070 systemd[1]: Started systemd-udevd.service. Jul 2 07:46:34.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.394105 systemd[1]: Starting dracut-pre-trigger.service... Jul 2 07:46:34.403758 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Jul 2 07:46:34.429139 systemd[1]: Finished dracut-pre-trigger.service. Jul 2 07:46:34.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.430878 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:46:34.469381 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:46:34.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:34.495327 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 2 07:46:34.505437 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 2 07:46:34.505484 kernel: GPT:9289727 != 19775487 Jul 2 07:46:34.505493 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 2 07:46:34.505502 kernel: GPT:9289727 != 19775487 Jul 2 07:46:34.505510 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 2 07:46:34.505519 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 07:46:34.505528 kernel: cryptd: max_cpu_qlen set to 1000 Jul 2 07:46:34.526356 kernel: AVX2 version of gcm_enc/dec engaged. Jul 2 07:46:34.526429 kernel: AES CTR mode by8 optimization enabled Jul 2 07:46:34.527346 kernel: libata version 3.00 loaded. Jul 2 07:46:34.532349 kernel: ata_piix 0000:00:01.1: version 2.13 Jul 2 07:46:34.535329 kernel: scsi host0: ata_piix Jul 2 07:46:34.538232 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 2 07:46:34.542056 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (463) Jul 2 07:46:34.542080 kernel: scsi host1: ata_piix Jul 2 07:46:34.542210 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Jul 2 07:46:34.542567 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 2 07:46:34.547740 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Jul 2 07:46:34.544715 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 2 07:46:34.551056 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 2 07:46:34.560873 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:46:34.562726 systemd[1]: Starting disk-uuid.service... Jul 2 07:46:34.569353 disk-uuid[522]: Primary Header is updated. Jul 2 07:46:34.569353 disk-uuid[522]: Secondary Entries is updated. Jul 2 07:46:34.569353 disk-uuid[522]: Secondary Header is updated. Jul 2 07:46:34.572827 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 07:46:34.703470 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 2 07:46:34.705381 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 2 07:46:34.736587 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 2 07:46:34.736814 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 2 07:46:34.754446 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Jul 2 07:46:35.583813 disk-uuid[523]: The operation has completed successfully. Jul 2 07:46:35.584958 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 2 07:46:35.609429 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 2 07:46:35.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.609507 systemd[1]: Finished disk-uuid.service. Jul 2 07:46:35.613581 systemd[1]: Starting verity-setup.service... Jul 2 07:46:35.625332 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 2 07:46:35.643237 systemd[1]: Found device dev-mapper-usr.device. Jul 2 07:46:35.644603 systemd[1]: Mounting sysusr-usr.mount... Jul 2 07:46:35.647437 systemd[1]: Finished verity-setup.service. Jul 2 07:46:35.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.709012 systemd[1]: Mounted sysusr-usr.mount. Jul 2 07:46:35.710434 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 2 07:46:35.709756 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 2 07:46:35.710447 systemd[1]: Starting ignition-setup.service... Jul 2 07:46:35.711441 systemd[1]: Starting parse-ip-for-networkd.service... Jul 2 07:46:35.723737 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:46:35.723772 kernel: BTRFS info (device vda6): using free space tree Jul 2 07:46:35.723781 kernel: BTRFS info (device vda6): has skinny extents Jul 2 07:46:35.731236 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 2 07:46:35.772007 systemd[1]: Finished parse-ip-for-networkd.service. Jul 2 07:46:35.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.776000 audit: BPF prog-id=9 op=LOAD Jul 2 07:46:35.777222 systemd[1]: Starting systemd-networkd.service... Jul 2 07:46:35.796981 systemd-networkd[705]: lo: Link UP Jul 2 07:46:35.796991 systemd-networkd[705]: lo: Gained carrier Jul 2 07:46:35.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.797380 systemd-networkd[705]: Enumeration completed Jul 2 07:46:35.797458 systemd[1]: Started systemd-networkd.service. Jul 2 07:46:35.797561 systemd-networkd[705]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:46:35.801000 systemd[1]: Reached target network.target. Jul 2 07:46:35.801206 systemd-networkd[705]: eth0: Link UP Jul 2 07:46:35.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.801209 systemd-networkd[705]: eth0: Gained carrier Jul 2 07:46:35.803643 systemd[1]: Starting iscsiuio.service... Jul 2 07:46:35.807701 systemd[1]: Started iscsiuio.service. Jul 2 07:46:35.809896 systemd[1]: Starting iscsid.service... Jul 2 07:46:35.814292 iscsid[710]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:46:35.814292 iscsid[710]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 2 07:46:35.814292 iscsid[710]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 2 07:46:35.814292 iscsid[710]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 2 07:46:35.814292 iscsid[710]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 2 07:46:35.814292 iscsid[710]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 2 07:46:35.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.814079 systemd[1]: Started iscsid.service. Jul 2 07:46:35.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.817260 systemd[1]: Starting dracut-initqueue.service... Jul 2 07:46:35.825822 systemd[1]: Finished dracut-initqueue.service. Jul 2 07:46:35.828705 systemd[1]: Reached target remote-fs-pre.target. Jul 2 07:46:35.829212 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:46:35.831214 systemd[1]: Reached target remote-fs.target. Jul 2 07:46:35.831404 systemd-networkd[705]: eth0: DHCPv4 address 10.0.0.78/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 2 07:46:35.833687 systemd[1]: Starting dracut-pre-mount.service... Jul 2 07:46:35.839750 systemd[1]: Finished ignition-setup.service. Jul 2 07:46:35.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.840370 systemd[1]: Finished dracut-pre-mount.service. Jul 2 07:46:35.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.842408 systemd[1]: Starting ignition-fetch-offline.service... Jul 2 07:46:35.879724 ignition[725]: Ignition 2.14.0 Jul 2 07:46:35.879735 ignition[725]: Stage: fetch-offline Jul 2 07:46:35.879780 ignition[725]: no configs at "/usr/lib/ignition/base.d" Jul 2 07:46:35.879787 ignition[725]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:46:35.879886 ignition[725]: parsed url from cmdline: "" Jul 2 07:46:35.879890 ignition[725]: no config URL provided Jul 2 07:46:35.879894 ignition[725]: reading system config file "/usr/lib/ignition/user.ign" Jul 2 07:46:35.879901 ignition[725]: no config at "/usr/lib/ignition/user.ign" Jul 2 07:46:35.879917 ignition[725]: op(1): [started] loading QEMU firmware config module Jul 2 07:46:35.879926 ignition[725]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 2 07:46:35.884360 ignition[725]: op(1): [finished] loading QEMU firmware config module Jul 2 07:46:35.884394 ignition[725]: QEMU firmware config was not found. Ignoring... Jul 2 07:46:35.931534 ignition[725]: parsing config with SHA512: ca1167ffa6a26814e7b20ce95631a782358e78b11e61a0f241420bccd4dded70ed081f7ec6a8d3e4d27e2c9c88bb969d66fd4c0a23c3fa8e21985fb768f67de9 Jul 2 07:46:35.937577 unknown[725]: fetched base config from "system" Jul 2 07:46:35.937589 unknown[725]: fetched user config from "qemu" Jul 2 07:46:35.939504 ignition[725]: fetch-offline: fetch-offline passed Jul 2 07:46:35.940321 ignition[725]: Ignition finished successfully Jul 2 07:46:35.941410 systemd[1]: Finished ignition-fetch-offline.service. Jul 2 07:46:35.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.943216 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 2 07:46:35.945462 systemd[1]: Starting ignition-kargs.service... Jul 2 07:46:35.954111 ignition[734]: Ignition 2.14.0 Jul 2 07:46:35.954121 ignition[734]: Stage: kargs Jul 2 07:46:35.954210 ignition[734]: no configs at "/usr/lib/ignition/base.d" Jul 2 07:46:35.954219 ignition[734]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:46:35.955117 ignition[734]: kargs: kargs passed Jul 2 07:46:35.955160 ignition[734]: Ignition finished successfully Jul 2 07:46:35.959957 systemd[1]: Finished ignition-kargs.service. Jul 2 07:46:35.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.962479 systemd[1]: Starting ignition-disks.service... Jul 2 07:46:35.968655 ignition[740]: Ignition 2.14.0 Jul 2 07:46:35.968673 ignition[740]: Stage: disks Jul 2 07:46:35.968759 ignition[740]: no configs at "/usr/lib/ignition/base.d" Jul 2 07:46:35.968766 ignition[740]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:46:35.969631 ignition[740]: disks: disks passed Jul 2 07:46:35.969676 ignition[740]: Ignition finished successfully Jul 2 07:46:35.974018 systemd[1]: Finished ignition-disks.service. Jul 2 07:46:35.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:35.975655 systemd[1]: Reached target initrd-root-device.target. Jul 2 07:46:35.976105 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:46:35.977596 systemd[1]: Reached target local-fs.target. Jul 2 07:46:35.979290 systemd[1]: Reached target sysinit.target. Jul 2 07:46:35.980733 systemd[1]: Reached target basic.target. Jul 2 07:46:35.983345 systemd[1]: Starting systemd-fsck-root.service... Jul 2 07:46:35.994635 systemd-fsck[748]: ROOT: clean, 614/553520 files, 56020/553472 blocks Jul 2 07:46:36.000273 systemd[1]: Finished systemd-fsck-root.service. Jul 2 07:46:36.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:36.003178 systemd[1]: Mounting sysroot.mount... Jul 2 07:46:36.010339 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 2 07:46:36.010385 systemd[1]: Mounted sysroot.mount. Jul 2 07:46:36.011809 systemd[1]: Reached target initrd-root-fs.target. Jul 2 07:46:36.013184 systemd[1]: Mounting sysroot-usr.mount... Jul 2 07:46:36.014225 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 2 07:46:36.014259 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 2 07:46:36.014282 systemd[1]: Reached target ignition-diskful.target. Jul 2 07:46:36.015963 systemd[1]: Mounted sysroot-usr.mount. Jul 2 07:46:36.020290 systemd[1]: Starting initrd-setup-root.service... Jul 2 07:46:36.025219 initrd-setup-root[758]: cut: /sysroot/etc/passwd: No such file or directory Jul 2 07:46:36.029448 initrd-setup-root[766]: cut: /sysroot/etc/group: No such file or directory Jul 2 07:46:36.033098 initrd-setup-root[774]: cut: /sysroot/etc/shadow: No such file or directory Jul 2 07:46:36.035591 initrd-setup-root[782]: cut: /sysroot/etc/gshadow: No such file or directory Jul 2 07:46:36.060138 systemd[1]: Finished initrd-setup-root.service. Jul 2 07:46:36.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:36.062445 systemd[1]: Starting ignition-mount.service... Jul 2 07:46:36.064411 systemd[1]: Starting sysroot-boot.service... Jul 2 07:46:36.067443 bash[799]: umount: /sysroot/usr/share/oem: not mounted. Jul 2 07:46:36.075019 ignition[801]: INFO : Ignition 2.14.0 Jul 2 07:46:36.075019 ignition[801]: INFO : Stage: mount Jul 2 07:46:36.076687 ignition[801]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 2 07:46:36.076687 ignition[801]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:46:36.076687 ignition[801]: INFO : mount: mount passed Jul 2 07:46:36.076687 ignition[801]: INFO : Ignition finished successfully Jul 2 07:46:36.081064 systemd[1]: Finished ignition-mount.service. Jul 2 07:46:36.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:36.082175 systemd[1]: Finished sysroot-boot.service. Jul 2 07:46:36.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:36.653288 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 2 07:46:36.660341 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (809) Jul 2 07:46:36.662329 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 2 07:46:36.662349 kernel: BTRFS info (device vda6): using free space tree Jul 2 07:46:36.662359 kernel: BTRFS info (device vda6): has skinny extents Jul 2 07:46:36.665690 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 2 07:46:36.666435 systemd[1]: Starting ignition-files.service... Jul 2 07:46:36.677947 ignition[829]: INFO : Ignition 2.14.0 Jul 2 07:46:36.677947 ignition[829]: INFO : Stage: files Jul 2 07:46:36.679596 ignition[829]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 2 07:46:36.679596 ignition[829]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:46:36.679596 ignition[829]: DEBUG : files: compiled without relabeling support, skipping Jul 2 07:46:36.683403 ignition[829]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 2 07:46:36.683403 ignition[829]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 2 07:46:36.683403 ignition[829]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 2 07:46:36.683403 ignition[829]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 2 07:46:36.683403 ignition[829]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 2 07:46:36.683403 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:46:36.683403 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 2 07:46:36.682329 unknown[829]: wrote ssh authorized keys file for user: core Jul 2 07:46:36.708936 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 2 07:46:36.767267 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:36.769391 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://github.com/flatcar/sysext-bakery/releases/download/latest/kubernetes-v1.29.2-x86-64.raw: attempt #1 Jul 2 07:46:37.109510 systemd-networkd[705]: eth0: Gained IPv6LL Jul 2 07:46:37.256898 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 2 07:46:37.725874 ignition[829]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.29.2-x86-64.raw" Jul 2 07:46:37.725874 ignition[829]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 2 07:46:37.730726 ignition[829]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 2 07:46:37.751465 ignition[829]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 2 07:46:37.754012 ignition[829]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 2 07:46:37.754012 ignition[829]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:46:37.754012 ignition[829]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 2 07:46:37.754012 ignition[829]: INFO : files: files passed Jul 2 07:46:37.754012 ignition[829]: INFO : Ignition finished successfully Jul 2 07:46:37.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.752700 systemd[1]: Finished ignition-files.service. Jul 2 07:46:37.754728 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 2 07:46:37.756330 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 2 07:46:37.769462 initrd-setup-root-after-ignition[853]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 2 07:46:37.756774 systemd[1]: Starting ignition-quench.service... Jul 2 07:46:37.771817 initrd-setup-root-after-ignition[855]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 2 07:46:37.760547 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 2 07:46:37.762440 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 2 07:46:37.762522 systemd[1]: Finished ignition-quench.service. Jul 2 07:46:37.763977 systemd[1]: Reached target ignition-complete.target. Jul 2 07:46:37.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.765696 systemd[1]: Starting initrd-parse-etc.service... Jul 2 07:46:37.776643 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 2 07:46:37.776725 systemd[1]: Finished initrd-parse-etc.service. Jul 2 07:46:37.778057 systemd[1]: Reached target initrd-fs.target. Jul 2 07:46:37.779663 systemd[1]: Reached target initrd.target. Jul 2 07:46:37.781406 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 2 07:46:37.782099 systemd[1]: Starting dracut-pre-pivot.service... Jul 2 07:46:37.790786 systemd[1]: Finished dracut-pre-pivot.service. Jul 2 07:46:37.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.793086 systemd[1]: Starting initrd-cleanup.service... Jul 2 07:46:37.801881 systemd[1]: Stopped target nss-lookup.target. Jul 2 07:46:37.802834 systemd[1]: Stopped target remote-cryptsetup.target. Jul 2 07:46:37.804462 systemd[1]: Stopped target timers.target. Jul 2 07:46:37.806045 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 2 07:46:37.807000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.806151 systemd[1]: Stopped dracut-pre-pivot.service. Jul 2 07:46:37.807654 systemd[1]: Stopped target initrd.target. Jul 2 07:46:37.809245 systemd[1]: Stopped target basic.target. Jul 2 07:46:37.810762 systemd[1]: Stopped target ignition-complete.target. Jul 2 07:46:37.812351 systemd[1]: Stopped target ignition-diskful.target. Jul 2 07:46:37.813942 systemd[1]: Stopped target initrd-root-device.target. Jul 2 07:46:37.815779 systemd[1]: Stopped target remote-fs.target. Jul 2 07:46:37.817482 systemd[1]: Stopped target remote-fs-pre.target. Jul 2 07:46:37.819279 systemd[1]: Stopped target sysinit.target. Jul 2 07:46:37.820991 systemd[1]: Stopped target local-fs.target. Jul 2 07:46:37.822563 systemd[1]: Stopped target local-fs-pre.target. Jul 2 07:46:37.824110 systemd[1]: Stopped target swap.target. Jul 2 07:46:37.827000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.825536 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 2 07:46:37.825651 systemd[1]: Stopped dracut-pre-mount.service. Jul 2 07:46:37.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.827250 systemd[1]: Stopped target cryptsetup.target. Jul 2 07:46:37.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.828660 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 2 07:46:37.828765 systemd[1]: Stopped dracut-initqueue.service. Jul 2 07:46:37.830520 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 2 07:46:37.830633 systemd[1]: Stopped ignition-fetch-offline.service. Jul 2 07:46:37.832167 systemd[1]: Stopped target paths.target. Jul 2 07:46:37.833571 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 2 07:46:37.837370 systemd[1]: Stopped systemd-ask-password-console.path. Jul 2 07:46:37.838881 systemd[1]: Stopped target slices.target. Jul 2 07:46:37.840674 systemd[1]: Stopped target sockets.target. Jul 2 07:46:37.842329 systemd[1]: iscsid.socket: Deactivated successfully. Jul 2 07:46:37.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.842408 systemd[1]: Closed iscsid.socket. Jul 2 07:46:37.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.843721 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 2 07:46:37.843828 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 2 07:46:37.845459 systemd[1]: ignition-files.service: Deactivated successfully. Jul 2 07:46:37.845557 systemd[1]: Stopped ignition-files.service. Jul 2 07:46:37.847852 systemd[1]: Stopping ignition-mount.service... Jul 2 07:46:37.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.854411 ignition[869]: INFO : Ignition 2.14.0 Jul 2 07:46:37.854411 ignition[869]: INFO : Stage: umount Jul 2 07:46:37.854411 ignition[869]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 2 07:46:37.854411 ignition[869]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 2 07:46:37.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.850549 systemd[1]: Stopping iscsiuio.service... Jul 2 07:46:37.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.862944 ignition[869]: INFO : umount: umount passed Jul 2 07:46:37.862944 ignition[869]: INFO : Ignition finished successfully Jul 2 07:46:37.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.852040 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 2 07:46:37.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.852170 systemd[1]: Stopped kmod-static-nodes.service. Jul 2 07:46:37.868000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.854467 systemd[1]: Stopping sysroot-boot.service... Jul 2 07:46:37.855185 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 2 07:46:37.855280 systemd[1]: Stopped systemd-udev-trigger.service. Jul 2 07:46:37.856849 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 2 07:46:37.856934 systemd[1]: Stopped dracut-pre-trigger.service. Jul 2 07:46:37.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.859751 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 2 07:46:37.859826 systemd[1]: Stopped iscsiuio.service. Jul 2 07:46:37.861596 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 2 07:46:37.861673 systemd[1]: Stopped ignition-mount.service. Jul 2 07:46:37.863221 systemd[1]: Stopped target network.target. Jul 2 07:46:37.886000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.864536 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 2 07:46:37.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.864564 systemd[1]: Closed iscsiuio.socket. Jul 2 07:46:37.866112 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 2 07:46:37.866143 systemd[1]: Stopped ignition-disks.service. Jul 2 07:46:37.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.868057 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 2 07:46:37.868087 systemd[1]: Stopped ignition-kargs.service. Jul 2 07:46:37.896000 audit: BPF prog-id=6 op=UNLOAD Jul 2 07:46:37.868950 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 2 07:46:37.868979 systemd[1]: Stopped ignition-setup.service. Jul 2 07:46:37.870672 systemd[1]: Stopping systemd-networkd.service... Jul 2 07:46:37.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.872532 systemd[1]: Stopping systemd-resolved.service... Jul 2 07:46:37.875324 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 2 07:46:37.875357 systemd-networkd[705]: eth0: DHCPv6 lease lost Jul 2 07:46:37.905000 audit: BPF prog-id=9 op=UNLOAD Jul 2 07:46:37.875733 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 2 07:46:37.875797 systemd[1]: Finished initrd-cleanup.service. Jul 2 07:46:37.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.878060 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 2 07:46:37.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.878145 systemd[1]: Stopped systemd-networkd.service. Jul 2 07:46:37.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.882099 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 2 07:46:37.882127 systemd[1]: Closed systemd-networkd.socket. Jul 2 07:46:37.884811 systemd[1]: Stopping network-cleanup.service... Jul 2 07:46:37.885830 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 2 07:46:37.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.885874 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 2 07:46:37.887005 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 2 07:46:37.887042 systemd[1]: Stopped systemd-sysctl.service. Jul 2 07:46:37.888749 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 2 07:46:37.888785 systemd[1]: Stopped systemd-modules-load.service. Jul 2 07:46:37.889919 systemd[1]: Stopping systemd-udevd.service... Jul 2 07:46:37.892584 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 2 07:46:37.892993 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 2 07:46:37.893077 systemd[1]: Stopped systemd-resolved.service. Jul 2 07:46:37.899043 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 2 07:46:37.899129 systemd[1]: Stopped network-cleanup.service. Jul 2 07:46:37.900806 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 2 07:46:37.900918 systemd[1]: Stopped systemd-udevd.service. Jul 2 07:46:37.903691 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 2 07:46:37.903725 systemd[1]: Closed systemd-udevd-control.socket. Jul 2 07:46:37.905549 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 2 07:46:37.905578 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 2 07:46:37.907417 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 2 07:46:37.907452 systemd[1]: Stopped dracut-pre-udev.service. Jul 2 07:46:37.909419 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 2 07:46:37.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.909454 systemd[1]: Stopped dracut-cmdline.service. Jul 2 07:46:37.911221 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 2 07:46:37.911258 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 2 07:46:37.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:37.912888 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 2 07:46:37.914174 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 2 07:46:37.914217 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 2 07:46:37.918993 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 2 07:46:37.919072 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 2 07:46:37.941027 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 2 07:46:37.941113 systemd[1]: Stopped sysroot-boot.service. Jul 2 07:46:37.942864 systemd[1]: Reached target initrd-switch-root.target. Jul 2 07:46:37.944658 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 2 07:46:37.944699 systemd[1]: Stopped initrd-setup-root.service. Jul 2 07:46:37.947297 systemd[1]: Starting initrd-switch-root.service... Jul 2 07:46:37.960634 systemd[1]: Switching root. Jul 2 07:46:37.982327 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Jul 2 07:46:37.982371 iscsid[710]: iscsid shutting down. Jul 2 07:46:37.983217 systemd-journald[198]: Journal stopped Jul 2 07:46:40.889201 kernel: SELinux: Class mctp_socket not defined in policy. Jul 2 07:46:40.889242 kernel: SELinux: Class anon_inode not defined in policy. Jul 2 07:46:40.889255 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 2 07:46:40.889269 kernel: SELinux: policy capability network_peer_controls=1 Jul 2 07:46:40.889283 kernel: SELinux: policy capability open_perms=1 Jul 2 07:46:40.889296 kernel: SELinux: policy capability extended_socket_class=1 Jul 2 07:46:40.889307 kernel: SELinux: policy capability always_check_network=0 Jul 2 07:46:40.889330 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 2 07:46:40.889344 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 2 07:46:40.889354 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 2 07:46:40.889366 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 2 07:46:40.889378 systemd[1]: Successfully loaded SELinux policy in 37.729ms. Jul 2 07:46:40.889398 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.263ms. Jul 2 07:46:40.889411 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 2 07:46:40.889423 systemd[1]: Detected virtualization kvm. Jul 2 07:46:40.889435 systemd[1]: Detected architecture x86-64. Jul 2 07:46:40.889448 systemd[1]: Detected first boot. Jul 2 07:46:40.889462 systemd[1]: Initializing machine ID from VM UUID. Jul 2 07:46:40.889474 kernel: kauditd_printk_skb: 64 callbacks suppressed Jul 2 07:46:40.889486 kernel: audit: type=1400 audit(1719906398.700:75): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:46:40.889498 kernel: audit: type=1400 audit(1719906398.700:76): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:46:40.889509 kernel: audit: type=1334 audit(1719906398.704:77): prog-id=10 op=LOAD Jul 2 07:46:40.889519 kernel: audit: type=1334 audit(1719906398.704:78): prog-id=10 op=UNLOAD Jul 2 07:46:40.889538 kernel: audit: type=1334 audit(1719906398.708:79): prog-id=11 op=LOAD Jul 2 07:46:40.889551 kernel: audit: type=1334 audit(1719906398.708:80): prog-id=11 op=UNLOAD Jul 2 07:46:40.889563 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 2 07:46:40.889575 kernel: audit: type=1400 audit(1719906398.738:81): avc: denied { associate } for pid=902 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 07:46:40.889587 kernel: audit: type=1300 audit(1719906398.738:81): arch=c000003e syscall=188 success=yes exit=0 a0=c0001858e2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=885 pid=902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:40.889599 kernel: audit: type=1327 audit(1719906398.738:81): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:46:40.889610 kernel: audit: type=1400 audit(1719906398.740:82): avc: denied { associate } for pid=902 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 07:46:40.889624 systemd[1]: Populated /etc with preset unit settings. Jul 2 07:46:40.889638 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:46:40.889651 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:46:40.889663 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:46:40.889677 systemd[1]: iscsid.service: Deactivated successfully. Jul 2 07:46:40.889689 systemd[1]: Stopped iscsid.service. Jul 2 07:46:40.889700 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 2 07:46:40.889713 systemd[1]: Stopped initrd-switch-root.service. Jul 2 07:46:40.889728 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 2 07:46:40.889741 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 2 07:46:40.889752 systemd[1]: Created slice system-addon\x2drun.slice. Jul 2 07:46:40.889766 systemd[1]: Created slice system-getty.slice. Jul 2 07:46:40.889777 systemd[1]: Created slice system-modprobe.slice. Jul 2 07:46:40.889789 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 2 07:46:40.889801 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 2 07:46:40.889812 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 2 07:46:40.889824 systemd[1]: Created slice user.slice. Jul 2 07:46:40.889836 systemd[1]: Started systemd-ask-password-console.path. Jul 2 07:46:40.889847 systemd[1]: Started systemd-ask-password-wall.path. Jul 2 07:46:40.889859 systemd[1]: Set up automount boot.automount. Jul 2 07:46:40.889872 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 2 07:46:40.889884 systemd[1]: Stopped target initrd-switch-root.target. Jul 2 07:46:40.889895 systemd[1]: Stopped target initrd-fs.target. Jul 2 07:46:40.889906 systemd[1]: Stopped target initrd-root-fs.target. Jul 2 07:46:40.889918 systemd[1]: Reached target integritysetup.target. Jul 2 07:46:40.889930 systemd[1]: Reached target remote-cryptsetup.target. Jul 2 07:46:40.889942 systemd[1]: Reached target remote-fs.target. Jul 2 07:46:40.889953 systemd[1]: Reached target slices.target. Jul 2 07:46:40.889964 systemd[1]: Reached target swap.target. Jul 2 07:46:40.889977 systemd[1]: Reached target torcx.target. Jul 2 07:46:40.889990 systemd[1]: Reached target veritysetup.target. Jul 2 07:46:40.890002 systemd[1]: Listening on systemd-coredump.socket. Jul 2 07:46:40.890014 systemd[1]: Listening on systemd-initctl.socket. Jul 2 07:46:40.890026 systemd[1]: Listening on systemd-networkd.socket. Jul 2 07:46:40.890037 systemd[1]: Listening on systemd-udevd-control.socket. Jul 2 07:46:40.890049 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 2 07:46:40.890061 systemd[1]: Listening on systemd-userdbd.socket. Jul 2 07:46:40.890072 systemd[1]: Mounting dev-hugepages.mount... Jul 2 07:46:40.890084 systemd[1]: Mounting dev-mqueue.mount... Jul 2 07:46:40.890097 systemd[1]: Mounting media.mount... Jul 2 07:46:40.890109 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:40.890121 systemd[1]: Mounting sys-kernel-debug.mount... Jul 2 07:46:40.890133 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 2 07:46:40.890144 systemd[1]: Mounting tmp.mount... Jul 2 07:46:40.890155 systemd[1]: Starting flatcar-tmpfiles.service... Jul 2 07:46:40.890167 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:46:40.890179 systemd[1]: Starting kmod-static-nodes.service... Jul 2 07:46:40.890190 systemd[1]: Starting modprobe@configfs.service... Jul 2 07:46:40.890203 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:46:40.890215 systemd[1]: Starting modprobe@drm.service... Jul 2 07:46:40.890228 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:46:40.890240 systemd[1]: Starting modprobe@fuse.service... Jul 2 07:46:40.890251 systemd[1]: Starting modprobe@loop.service... Jul 2 07:46:40.890263 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 2 07:46:40.890276 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 2 07:46:40.890287 systemd[1]: Stopped systemd-fsck-root.service. Jul 2 07:46:40.890299 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 2 07:46:40.890325 kernel: loop: module loaded Jul 2 07:46:40.890336 systemd[1]: Stopped systemd-fsck-usr.service. Jul 2 07:46:40.890348 systemd[1]: Stopped systemd-journald.service. Jul 2 07:46:40.890360 kernel: fuse: init (API version 7.34) Jul 2 07:46:40.890372 systemd[1]: Starting systemd-journald.service... Jul 2 07:46:40.890383 systemd[1]: Starting systemd-modules-load.service... Jul 2 07:46:40.890395 systemd[1]: Starting systemd-network-generator.service... Jul 2 07:46:40.890407 systemd[1]: Starting systemd-remount-fs.service... Jul 2 07:46:40.890419 systemd[1]: Starting systemd-udev-trigger.service... Jul 2 07:46:40.890430 systemd[1]: verity-setup.service: Deactivated successfully. Jul 2 07:46:40.890443 systemd[1]: Stopped verity-setup.service. Jul 2 07:46:40.890455 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:40.890467 systemd[1]: Mounted dev-hugepages.mount. Jul 2 07:46:40.890481 systemd-journald[987]: Journal started Jul 2 07:46:40.890522 systemd-journald[987]: Runtime Journal (/run/log/journal/7f89a2422aba4798a5b47dad803d0360) is 6.0M, max 48.4M, 42.4M free. Jul 2 07:46:38.042000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 2 07:46:38.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:46:38.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 2 07:46:38.704000 audit: BPF prog-id=10 op=LOAD Jul 2 07:46:38.704000 audit: BPF prog-id=10 op=UNLOAD Jul 2 07:46:38.708000 audit: BPF prog-id=11 op=LOAD Jul 2 07:46:38.708000 audit: BPF prog-id=11 op=UNLOAD Jul 2 07:46:38.738000 audit[902]: AVC avc: denied { associate } for pid=902 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 2 07:46:38.738000 audit[902]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001858e2 a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=885 pid=902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:38.738000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:46:38.740000 audit[902]: AVC avc: denied { associate } for pid=902 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 2 07:46:38.740000 audit[902]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001859b9 a2=1ed a3=0 items=2 ppid=885 pid=902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:38.740000 audit: CWD cwd="/" Jul 2 07:46:38.740000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:38.740000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:38.740000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 2 07:46:40.751000 audit: BPF prog-id=12 op=LOAD Jul 2 07:46:40.751000 audit: BPF prog-id=3 op=UNLOAD Jul 2 07:46:40.751000 audit: BPF prog-id=13 op=LOAD Jul 2 07:46:40.751000 audit: BPF prog-id=14 op=LOAD Jul 2 07:46:40.751000 audit: BPF prog-id=4 op=UNLOAD Jul 2 07:46:40.751000 audit: BPF prog-id=5 op=UNLOAD Jul 2 07:46:40.752000 audit: BPF prog-id=15 op=LOAD Jul 2 07:46:40.752000 audit: BPF prog-id=12 op=UNLOAD Jul 2 07:46:40.752000 audit: BPF prog-id=16 op=LOAD Jul 2 07:46:40.752000 audit: BPF prog-id=17 op=LOAD Jul 2 07:46:40.752000 audit: BPF prog-id=13 op=UNLOAD Jul 2 07:46:40.752000 audit: BPF prog-id=14 op=UNLOAD Jul 2 07:46:40.752000 audit: BPF prog-id=18 op=LOAD Jul 2 07:46:40.752000 audit: BPF prog-id=15 op=UNLOAD Jul 2 07:46:40.753000 audit: BPF prog-id=19 op=LOAD Jul 2 07:46:40.753000 audit: BPF prog-id=20 op=LOAD Jul 2 07:46:40.753000 audit: BPF prog-id=16 op=UNLOAD Jul 2 07:46:40.753000 audit: BPF prog-id=17 op=UNLOAD Jul 2 07:46:40.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.762000 audit: BPF prog-id=18 op=UNLOAD Jul 2 07:46:40.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.865000 audit: BPF prog-id=21 op=LOAD Jul 2 07:46:40.865000 audit: BPF prog-id=22 op=LOAD Jul 2 07:46:40.865000 audit: BPF prog-id=23 op=LOAD Jul 2 07:46:40.865000 audit: BPF prog-id=19 op=UNLOAD Jul 2 07:46:40.865000 audit: BPF prog-id=20 op=UNLOAD Jul 2 07:46:40.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.885000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 2 07:46:40.885000 audit[987]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffde23ba3a0 a2=4000 a3=7ffde23ba43c items=0 ppid=1 pid=987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:40.885000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 2 07:46:38.737622 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:46:40.750226 systemd[1]: Queued start job for default target multi-user.target. Jul 2 07:46:38.737808 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:46:40.750237 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 2 07:46:38.737826 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:46:40.753858 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 2 07:46:38.737854 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 2 07:46:38.737864 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 2 07:46:38.737889 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 2 07:46:38.737901 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 2 07:46:38.738075 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 2 07:46:38.738108 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 2 07:46:38.738118 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 2 07:46:38.738708 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 2 07:46:38.738740 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 2 07:46:38.738755 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.5: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.5 Jul 2 07:46:38.738768 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 2 07:46:38.738783 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.5: no such file or directory" path=/var/lib/torcx/store/3510.3.5 Jul 2 07:46:38.738795 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 2 07:46:40.497375 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:40Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:40.497636 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:40Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:40.497719 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:40Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:40.497860 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:40Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 2 07:46:40.893471 systemd[1]: Started systemd-journald.service. Jul 2 07:46:40.497904 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:40Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 2 07:46:40.497953 /usr/lib/systemd/system-generators/torcx-generator[902]: time="2024-07-02T07:46:40Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 2 07:46:40.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.894070 systemd[1]: Mounted dev-mqueue.mount. Jul 2 07:46:40.894962 systemd[1]: Mounted media.mount. Jul 2 07:46:40.895831 systemd[1]: Mounted sys-kernel-debug.mount. Jul 2 07:46:40.896760 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 2 07:46:40.897727 systemd[1]: Mounted tmp.mount. Jul 2 07:46:40.898841 systemd[1]: Finished flatcar-tmpfiles.service. Jul 2 07:46:40.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.900106 systemd[1]: Finished kmod-static-nodes.service. Jul 2 07:46:40.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.901234 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 2 07:46:40.901500 systemd[1]: Finished modprobe@configfs.service. Jul 2 07:46:40.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.902641 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:46:40.902833 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:46:40.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.903975 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:46:40.904155 systemd[1]: Finished modprobe@drm.service. Jul 2 07:46:40.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.905214 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:46:40.905427 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:46:40.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.906579 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 2 07:46:40.906785 systemd[1]: Finished modprobe@fuse.service. Jul 2 07:46:40.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.907000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.908011 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:46:40.908197 systemd[1]: Finished modprobe@loop.service. Jul 2 07:46:40.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.909395 systemd[1]: Finished systemd-modules-load.service. Jul 2 07:46:40.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.910659 systemd[1]: Finished systemd-network-generator.service. Jul 2 07:46:40.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.912047 systemd[1]: Finished systemd-remount-fs.service. Jul 2 07:46:40.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.913401 systemd[1]: Reached target network-pre.target. Jul 2 07:46:40.915649 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 2 07:46:40.917614 systemd[1]: Mounting sys-kernel-config.mount... Jul 2 07:46:40.918426 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 2 07:46:40.920051 systemd[1]: Starting systemd-hwdb-update.service... Jul 2 07:46:40.922037 systemd[1]: Starting systemd-journal-flush.service... Jul 2 07:46:40.923072 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:46:40.924044 systemd[1]: Starting systemd-random-seed.service... Jul 2 07:46:40.925108 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:46:40.926026 systemd[1]: Starting systemd-sysctl.service... Jul 2 07:46:40.927875 systemd[1]: Starting systemd-sysusers.service... Jul 2 07:46:40.928353 systemd-journald[987]: Time spent on flushing to /var/log/journal/7f89a2422aba4798a5b47dad803d0360 is 17.304ms for 1162 entries. Jul 2 07:46:40.928353 systemd-journald[987]: System Journal (/var/log/journal/7f89a2422aba4798a5b47dad803d0360) is 8.0M, max 195.6M, 187.6M free. Jul 2 07:46:40.960624 systemd-journald[987]: Received client request to flush runtime journal. Jul 2 07:46:40.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:40.932311 systemd[1]: Finished systemd-udev-trigger.service. Jul 2 07:46:40.961082 udevadm[1005]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 2 07:46:40.933699 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 2 07:46:40.935197 systemd[1]: Mounted sys-kernel-config.mount. Jul 2 07:46:40.937165 systemd[1]: Starting systemd-udev-settle.service... Jul 2 07:46:40.941856 systemd[1]: Finished systemd-random-seed.service. Jul 2 07:46:40.942978 systemd[1]: Finished systemd-sysusers.service. Jul 2 07:46:40.945470 systemd[1]: Reached target first-boot-complete.target. Jul 2 07:46:40.947687 systemd[1]: Finished systemd-sysctl.service. Jul 2 07:46:40.961424 systemd[1]: Finished systemd-journal-flush.service. Jul 2 07:46:40.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.358450 systemd[1]: Finished systemd-hwdb-update.service. Jul 2 07:46:41.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.359000 audit: BPF prog-id=24 op=LOAD Jul 2 07:46:41.359000 audit: BPF prog-id=25 op=LOAD Jul 2 07:46:41.359000 audit: BPF prog-id=7 op=UNLOAD Jul 2 07:46:41.359000 audit: BPF prog-id=8 op=UNLOAD Jul 2 07:46:41.360848 systemd[1]: Starting systemd-udevd.service... Jul 2 07:46:41.376058 systemd-udevd[1008]: Using default interface naming scheme 'v252'. Jul 2 07:46:41.388139 systemd[1]: Started systemd-udevd.service. Jul 2 07:46:41.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.389000 audit: BPF prog-id=26 op=LOAD Jul 2 07:46:41.390569 systemd[1]: Starting systemd-networkd.service... Jul 2 07:46:41.396000 audit: BPF prog-id=27 op=LOAD Jul 2 07:46:41.396000 audit: BPF prog-id=28 op=LOAD Jul 2 07:46:41.396000 audit: BPF prog-id=29 op=LOAD Jul 2 07:46:41.397324 systemd[1]: Starting systemd-userdbd.service... Jul 2 07:46:41.422709 systemd[1]: Started systemd-userdbd.service. Jul 2 07:46:41.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.424491 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 2 07:46:41.449712 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 2 07:46:41.464352 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 2 07:46:41.473031 systemd-networkd[1015]: lo: Link UP Jul 2 07:46:41.473038 systemd-networkd[1015]: lo: Gained carrier Jul 2 07:46:41.473782 systemd-networkd[1015]: Enumeration completed Jul 2 07:46:41.473864 systemd[1]: Started systemd-networkd.service. Jul 2 07:46:41.473872 systemd-networkd[1015]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 2 07:46:41.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.475065 systemd-networkd[1015]: eth0: Link UP Jul 2 07:46:41.475067 systemd-networkd[1015]: eth0: Gained carrier Jul 2 07:46:41.476000 audit[1022]: AVC avc: denied { confidentiality } for pid=1022 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 2 07:46:41.480345 kernel: ACPI: button: Power Button [PWRF] Jul 2 07:46:41.476000 audit[1022]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=558670b723a0 a1=3207c a2=7f54b3b95bc5 a3=5 items=108 ppid=1008 pid=1022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:41.476000 audit: CWD cwd="/" Jul 2 07:46:41.476000 audit: PATH item=0 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=1 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=2 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=3 name=(null) inode=16386 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=4 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=5 name=(null) inode=16387 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=6 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=7 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=8 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=9 name=(null) inode=16389 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=10 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=11 name=(null) inode=16390 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=12 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=13 name=(null) inode=16391 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=14 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=15 name=(null) inode=16392 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=16 name=(null) inode=16388 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=17 name=(null) inode=16393 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=18 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=19 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=20 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=21 name=(null) inode=16395 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=22 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=23 name=(null) inode=16396 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=24 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=25 name=(null) inode=16397 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=26 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=27 name=(null) inode=16398 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=28 name=(null) inode=16394 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=29 name=(null) inode=16399 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=30 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=31 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=32 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=33 name=(null) inode=16401 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=34 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=35 name=(null) inode=16402 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=36 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=37 name=(null) inode=16403 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=38 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=39 name=(null) inode=16404 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=40 name=(null) inode=16400 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=41 name=(null) inode=16405 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=42 name=(null) inode=16385 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=43 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=44 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=45 name=(null) inode=16407 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=46 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=47 name=(null) inode=16408 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=48 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=49 name=(null) inode=16409 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=50 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=51 name=(null) inode=16410 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=52 name=(null) inode=16406 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=53 name=(null) inode=16411 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=54 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=55 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=56 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=57 name=(null) inode=16413 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=58 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=59 name=(null) inode=16414 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=60 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=61 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=62 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=63 name=(null) inode=16416 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=64 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=65 name=(null) inode=16417 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=66 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=67 name=(null) inode=16418 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=68 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=69 name=(null) inode=16419 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=70 name=(null) inode=16415 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=71 name=(null) inode=16420 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=72 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=73 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=74 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=75 name=(null) inode=16422 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=76 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=77 name=(null) inode=16423 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=78 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=79 name=(null) inode=16424 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=80 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=81 name=(null) inode=16425 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=82 name=(null) inode=16421 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.487655 systemd-networkd[1015]: eth0: DHCPv4 address 10.0.0.78/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 2 07:46:41.476000 audit: PATH item=83 name=(null) inode=16426 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=84 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=85 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=86 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=87 name=(null) inode=16428 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=88 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=89 name=(null) inode=16429 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=90 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=91 name=(null) inode=16430 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=92 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=93 name=(null) inode=16431 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=94 name=(null) inode=16427 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=95 name=(null) inode=16432 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=96 name=(null) inode=16412 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=97 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=98 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=99 name=(null) inode=16434 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=100 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=101 name=(null) inode=16435 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=102 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=103 name=(null) inode=16436 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=104 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=105 name=(null) inode=16437 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=106 name=(null) inode=16433 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PATH item=107 name=(null) inode=16438 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:46:41.476000 audit: PROCTITLE proctitle="(udev-worker)" Jul 2 07:46:41.497333 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 0 Jul 2 07:46:41.501331 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 2 07:46:41.518338 kernel: mousedev: PS/2 mouse device common for all mice Jul 2 07:46:41.556367 kernel: kvm: Nested Virtualization enabled Jul 2 07:46:41.556468 kernel: SVM: kvm: Nested Paging enabled Jul 2 07:46:41.556483 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 2 07:46:41.557568 kernel: SVM: Virtual GIF supported Jul 2 07:46:41.571337 kernel: EDAC MC: Ver: 3.0.0 Jul 2 07:46:41.590639 systemd[1]: Finished systemd-udev-settle.service. Jul 2 07:46:41.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.592676 systemd[1]: Starting lvm2-activation-early.service... Jul 2 07:46:41.599774 lvm[1044]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:46:41.626361 systemd[1]: Finished lvm2-activation-early.service. Jul 2 07:46:41.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.627374 systemd[1]: Reached target cryptsetup.target. Jul 2 07:46:41.629097 systemd[1]: Starting lvm2-activation.service... Jul 2 07:46:41.632063 lvm[1045]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 2 07:46:41.658845 systemd[1]: Finished lvm2-activation.service. Jul 2 07:46:41.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.659774 systemd[1]: Reached target local-fs-pre.target. Jul 2 07:46:41.660655 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 2 07:46:41.660676 systemd[1]: Reached target local-fs.target. Jul 2 07:46:41.661485 systemd[1]: Reached target machines.target. Jul 2 07:46:41.663068 systemd[1]: Starting ldconfig.service... Jul 2 07:46:41.664042 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:46:41.664093 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:41.664938 systemd[1]: Starting systemd-boot-update.service... Jul 2 07:46:41.666835 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 2 07:46:41.669172 systemd[1]: Starting systemd-machine-id-commit.service... Jul 2 07:46:41.674356 systemd[1]: Starting systemd-sysext.service... Jul 2 07:46:41.675766 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 2 07:46:41.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.677398 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1047 (bootctl) Jul 2 07:46:41.678177 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 2 07:46:41.685078 systemd[1]: Unmounting usr-share-oem.mount... Jul 2 07:46:41.689445 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 2 07:46:41.689632 systemd[1]: Unmounted usr-share-oem.mount. Jul 2 07:46:41.703338 kernel: loop0: detected capacity change from 0 to 211296 Jul 2 07:46:41.713288 systemd-fsck[1056]: fsck.fat 4.2 (2021-01-31) Jul 2 07:46:41.713288 systemd-fsck[1056]: /dev/vda1: 790 files, 119261/258078 clusters Jul 2 07:46:41.717547 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 2 07:46:41.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.722515 systemd[1]: Mounting boot.mount... Jul 2 07:46:41.864804 systemd[1]: Mounted boot.mount. Jul 2 07:46:41.875345 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 2 07:46:41.876097 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 2 07:46:41.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.877387 systemd[1]: Finished systemd-machine-id-commit.service. Jul 2 07:46:41.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.879219 systemd[1]: Finished systemd-boot-update.service. Jul 2 07:46:41.892350 kernel: loop1: detected capacity change from 0 to 211296 Jul 2 07:46:41.896407 (sd-sysext)[1061]: Using extensions 'kubernetes'. Jul 2 07:46:41.896771 (sd-sysext)[1061]: Merged extensions into '/usr'. Jul 2 07:46:41.913275 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:41.914657 systemd[1]: Mounting usr-share-oem.mount... Jul 2 07:46:41.915706 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:46:41.916830 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:46:41.918813 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:46:41.920654 systemd[1]: Starting modprobe@loop.service... Jul 2 07:46:41.921684 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:46:41.921794 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:41.921893 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:41.924138 systemd[1]: Mounted usr-share-oem.mount. Jul 2 07:46:41.925291 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:46:41.925403 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:46:41.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.926660 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:46:41.926748 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:46:41.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.928066 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:46:41.928155 systemd[1]: Finished modprobe@loop.service. Jul 2 07:46:41.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.929300 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:46:41.929425 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:46:41.930216 systemd[1]: Finished systemd-sysext.service. Jul 2 07:46:41.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:41.931717 ldconfig[1046]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 2 07:46:41.931900 systemd[1]: Starting ensure-sysext.service... Jul 2 07:46:41.933527 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 2 07:46:41.938025 systemd[1]: Reloading. Jul 2 07:46:41.946810 systemd-tmpfiles[1068]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 2 07:46:41.948864 systemd-tmpfiles[1068]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 2 07:46:41.952209 systemd-tmpfiles[1068]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 2 07:46:41.983099 /usr/lib/systemd/system-generators/torcx-generator[1088]: time="2024-07-02T07:46:41Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:46:41.983127 /usr/lib/systemd/system-generators/torcx-generator[1088]: time="2024-07-02T07:46:41Z" level=info msg="torcx already run" Jul 2 07:46:42.042428 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:46:42.042444 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:46:42.059046 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:46:42.108000 audit: BPF prog-id=30 op=LOAD Jul 2 07:46:42.108000 audit: BPF prog-id=21 op=UNLOAD Jul 2 07:46:42.108000 audit: BPF prog-id=31 op=LOAD Jul 2 07:46:42.108000 audit: BPF prog-id=32 op=LOAD Jul 2 07:46:42.108000 audit: BPF prog-id=22 op=UNLOAD Jul 2 07:46:42.108000 audit: BPF prog-id=23 op=UNLOAD Jul 2 07:46:42.109000 audit: BPF prog-id=33 op=LOAD Jul 2 07:46:42.109000 audit: BPF prog-id=27 op=UNLOAD Jul 2 07:46:42.109000 audit: BPF prog-id=34 op=LOAD Jul 2 07:46:42.109000 audit: BPF prog-id=35 op=LOAD Jul 2 07:46:42.109000 audit: BPF prog-id=28 op=UNLOAD Jul 2 07:46:42.109000 audit: BPF prog-id=29 op=UNLOAD Jul 2 07:46:42.110000 audit: BPF prog-id=36 op=LOAD Jul 2 07:46:42.110000 audit: BPF prog-id=37 op=LOAD Jul 2 07:46:42.110000 audit: BPF prog-id=24 op=UNLOAD Jul 2 07:46:42.110000 audit: BPF prog-id=25 op=UNLOAD Jul 2 07:46:42.112000 audit: BPF prog-id=38 op=LOAD Jul 2 07:46:42.112000 audit: BPF prog-id=26 op=UNLOAD Jul 2 07:46:42.114478 systemd[1]: Finished ldconfig.service. Jul 2 07:46:42.115000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.116131 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 2 07:46:42.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.119479 systemd[1]: Starting audit-rules.service... Jul 2 07:46:42.120953 systemd[1]: Starting clean-ca-certificates.service... Jul 2 07:46:42.122949 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 2 07:46:42.124000 audit: BPF prog-id=39 op=LOAD Jul 2 07:46:42.125256 systemd[1]: Starting systemd-resolved.service... Jul 2 07:46:42.126000 audit: BPF prog-id=40 op=LOAD Jul 2 07:46:42.127252 systemd[1]: Starting systemd-timesyncd.service... Jul 2 07:46:42.128808 systemd[1]: Starting systemd-update-utmp.service... Jul 2 07:46:42.130079 systemd[1]: Finished clean-ca-certificates.service. Jul 2 07:46:42.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.132000 audit[1141]: SYSTEM_BOOT pid=1141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.134368 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:46:42.136886 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:42.137151 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.138239 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:46:42.140038 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:46:42.141586 systemd[1]: Starting modprobe@loop.service... Jul 2 07:46:42.142424 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.142533 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:42.142617 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:46:42.142677 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:42.143526 systemd[1]: Finished systemd-update-utmp.service. Jul 2 07:46:42.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.145000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.144819 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:46:42.144907 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:46:42.146238 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:46:42.146384 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:46:42.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.147620 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:46:42.147709 systemd[1]: Finished modprobe@loop.service. Jul 2 07:46:42.148000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.148980 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 2 07:46:42.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:42.152066 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:42.152228 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.153413 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:46:42.155003 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:46:42.156654 systemd[1]: Starting modprobe@loop.service... Jul 2 07:46:42.157412 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.157510 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:42.158461 systemd[1]: Starting systemd-update-done.service... Jul 2 07:46:42.159376 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:46:42.159459 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:42.160294 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:46:42.160553 augenrules[1158]: No rules Jul 2 07:46:42.160558 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:46:42.160000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 2 07:46:42.160000 audit[1158]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffea7c4b140 a2=420 a3=0 items=0 ppid=1130 pid=1158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:42.160000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 2 07:46:42.161730 systemd[1]: Finished audit-rules.service. Jul 2 07:46:42.162809 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:46:42.162901 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:46:42.164112 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:46:42.164198 systemd[1]: Finished modprobe@loop.service. Jul 2 07:46:42.165288 systemd[1]: Finished systemd-update-done.service. Jul 2 07:46:42.166544 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:46:42.166644 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.168943 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:42.169138 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.170128 systemd[1]: Starting modprobe@dm_mod.service... Jul 2 07:46:42.171989 systemd[1]: Starting modprobe@drm.service... Jul 2 07:46:42.173979 systemd[1]: Starting modprobe@efi_pstore.service... Jul 2 07:46:42.175704 systemd[1]: Starting modprobe@loop.service... Jul 2 07:46:42.176568 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.176667 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:42.177670 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 2 07:46:42.178742 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 2 07:46:42.178836 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 2 07:46:42.179805 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 2 07:46:42.179923 systemd[1]: Finished modprobe@dm_mod.service. Jul 2 07:46:42.181256 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 2 07:46:42.181419 systemd[1]: Finished modprobe@drm.service. Jul 2 07:46:42.182623 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 2 07:46:42.182726 systemd[1]: Finished modprobe@efi_pstore.service. Jul 2 07:46:42.184001 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 2 07:46:42.184106 systemd[1]: Finished modprobe@loop.service. Jul 2 07:46:42.185419 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 2 07:46:42.185510 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.186351 systemd[1]: Finished ensure-sysext.service. Jul 2 07:46:42.190955 systemd-resolved[1136]: Positive Trust Anchors: Jul 2 07:46:42.191171 systemd-resolved[1136]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 2 07:46:42.191281 systemd-resolved[1136]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 2 07:46:42.194113 systemd[1]: Started systemd-timesyncd.service. Jul 2 07:46:42.195327 systemd[1]: Reached target time-set.target. Jul 2 07:46:42.195353 systemd-timesyncd[1137]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 2 07:46:42.195385 systemd-timesyncd[1137]: Initial clock synchronization to Tue 2024-07-02 07:46:42.553545 UTC. Jul 2 07:46:42.199441 systemd-resolved[1136]: Defaulting to hostname 'linux'. Jul 2 07:46:42.200993 systemd[1]: Started systemd-resolved.service. Jul 2 07:46:42.201875 systemd[1]: Reached target network.target. Jul 2 07:46:42.202704 systemd[1]: Reached target nss-lookup.target. Jul 2 07:46:42.203677 systemd[1]: Reached target sysinit.target. Jul 2 07:46:42.204664 systemd[1]: Started motdgen.path. Jul 2 07:46:42.205525 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 2 07:46:42.206964 systemd[1]: Started logrotate.timer. Jul 2 07:46:42.207950 systemd[1]: Started mdadm.timer. Jul 2 07:46:42.208790 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 2 07:46:42.209822 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 2 07:46:42.209853 systemd[1]: Reached target paths.target. Jul 2 07:46:42.210815 systemd[1]: Reached target timers.target. Jul 2 07:46:42.212158 systemd[1]: Listening on dbus.socket. Jul 2 07:46:42.214258 systemd[1]: Starting docker.socket... Jul 2 07:46:42.217037 systemd[1]: Listening on sshd.socket. Jul 2 07:46:42.218033 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:42.218366 systemd[1]: Listening on docker.socket. Jul 2 07:46:42.219188 systemd[1]: Reached target sockets.target. Jul 2 07:46:42.220002 systemd[1]: Reached target basic.target. Jul 2 07:46:42.220823 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.220846 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 2 07:46:42.221535 systemd[1]: Starting containerd.service... Jul 2 07:46:42.223032 systemd[1]: Starting dbus.service... Jul 2 07:46:42.224420 systemd[1]: Starting enable-oem-cloudinit.service... Jul 2 07:46:42.226132 systemd[1]: Starting extend-filesystems.service... Jul 2 07:46:42.227116 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 2 07:46:42.228481 jq[1173]: false Jul 2 07:46:42.227932 systemd[1]: Starting motdgen.service... Jul 2 07:46:42.233006 systemd[1]: Starting prepare-helm.service... Jul 2 07:46:42.234671 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 2 07:46:42.236374 systemd[1]: Starting sshd-keygen.service... Jul 2 07:46:42.239534 extend-filesystems[1174]: Found loop1 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found sr0 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda1 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda2 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda3 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found usr Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda4 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda6 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda7 Jul 2 07:46:42.239534 extend-filesystems[1174]: Found vda9 Jul 2 07:46:42.239534 extend-filesystems[1174]: Checking size of /dev/vda9 Jul 2 07:46:42.238131 dbus-daemon[1172]: [system] SELinux support is enabled Jul 2 07:46:42.239136 systemd[1]: Starting systemd-logind.service... Jul 2 07:46:42.239942 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 2 07:46:42.240651 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 2 07:46:42.240950 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 2 07:46:42.244721 systemd[1]: Starting update-engine.service... Jul 2 07:46:42.250955 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 2 07:46:42.252460 systemd[1]: Started dbus.service. Jul 2 07:46:42.253793 jq[1194]: true Jul 2 07:46:42.255769 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 2 07:46:42.256213 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 2 07:46:42.256454 systemd[1]: motdgen.service: Deactivated successfully. Jul 2 07:46:42.256740 systemd[1]: Finished motdgen.service. Jul 2 07:46:42.275538 extend-filesystems[1174]: Resized partition /dev/vda9 Jul 2 07:46:42.280356 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 2 07:46:42.258327 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 2 07:46:42.280445 tar[1196]: linux-amd64/helm Jul 2 07:46:42.280684 extend-filesystems[1202]: resize2fs 1.46.5 (30-Dec-2021) Jul 2 07:46:42.258498 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 2 07:46:42.282518 jq[1198]: true Jul 2 07:46:42.264924 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 2 07:46:42.264943 systemd[1]: Reached target system-config.target. Jul 2 07:46:42.266212 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 2 07:46:42.266225 systemd[1]: Reached target user-config.target. Jul 2 07:46:42.286725 update_engine[1193]: I0702 07:46:42.286278 1193 main.cc:92] Flatcar Update Engine starting Jul 2 07:46:42.288181 systemd[1]: Started update-engine.service. Jul 2 07:46:42.288227 update_engine[1193]: I0702 07:46:42.288199 1193 update_check_scheduler.cc:74] Next update check in 5m14s Jul 2 07:46:42.290564 systemd[1]: Started locksmithd.service. Jul 2 07:46:42.301076 env[1201]: time="2024-07-02T07:46:42.301038028Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 2 07:46:42.312726 systemd-logind[1186]: Watching system buttons on /dev/input/event1 (Power Button) Jul 2 07:46:42.312746 systemd-logind[1186]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 2 07:46:42.313443 systemd-logind[1186]: New seat seat0. Jul 2 07:46:42.320780 systemd[1]: Started systemd-logind.service. Jul 2 07:46:42.329351 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.324263383Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.324404177Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325459286Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.161-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325478402Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325670202Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325684048Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325694948Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325702572Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325763697Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358520 env[1201]: time="2024-07-02T07:46:42.325929949Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 2 07:46:42.358247 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 2 07:46:42.358843 extend-filesystems[1202]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 2 07:46:42.358843 extend-filesystems[1202]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 2 07:46:42.358843 extend-filesystems[1202]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 2 07:46:42.363839 env[1201]: time="2024-07-02T07:46:42.326031810Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 2 07:46:42.363839 env[1201]: time="2024-07-02T07:46:42.326043842Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 2 07:46:42.363839 env[1201]: time="2024-07-02T07:46:42.326080381Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 2 07:46:42.363839 env[1201]: time="2024-07-02T07:46:42.326090179Z" level=info msg="metadata content store policy set" policy=shared Jul 2 07:46:42.358409 systemd[1]: Finished extend-filesystems.service. Jul 2 07:46:42.363980 extend-filesystems[1174]: Resized filesystem in /dev/vda9 Jul 2 07:46:42.364966 env[1201]: time="2024-07-02T07:46:42.364604648Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 2 07:46:42.364966 env[1201]: time="2024-07-02T07:46:42.364630015Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 2 07:46:42.364966 env[1201]: time="2024-07-02T07:46:42.364641727Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 2 07:46:42.364966 env[1201]: time="2024-07-02T07:46:42.364685920Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.364966 env[1201]: time="2024-07-02T07:46:42.364697492Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.364966 env[1201]: time="2024-07-02T07:46:42.364709625Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.365081 bash[1226]: Updated "/home/core/.ssh/authorized_keys" Jul 2 07:46:42.365194 env[1201]: time="2024-07-02T07:46:42.364720104Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.365291 env[1201]: time="2024-07-02T07:46:42.365273472Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.365325 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 2 07:46:42.365449 env[1201]: time="2024-07-02T07:46:42.365432400Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.365551 env[1201]: time="2024-07-02T07:46:42.365534451Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.365648 env[1201]: time="2024-07-02T07:46:42.365629299Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.365745 env[1201]: time="2024-07-02T07:46:42.365728956Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 2 07:46:42.365933 env[1201]: time="2024-07-02T07:46:42.365918331Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 2 07:46:42.366103 env[1201]: time="2024-07-02T07:46:42.366088130Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 2 07:46:42.366896 env[1201]: time="2024-07-02T07:46:42.366877991Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 2 07:46:42.367016 env[1201]: time="2024-07-02T07:46:42.366997766Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.367123 env[1201]: time="2024-07-02T07:46:42.367103384Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 2 07:46:42.367275 env[1201]: time="2024-07-02T07:46:42.367243757Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.367496 env[1201]: time="2024-07-02T07:46:42.367467927Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.367602 env[1201]: time="2024-07-02T07:46:42.367582572Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.367706 env[1201]: time="2024-07-02T07:46:42.367687709Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.367812 env[1201]: time="2024-07-02T07:46:42.367792957Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.367925 env[1201]: time="2024-07-02T07:46:42.367905859Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.368029 env[1201]: time="2024-07-02T07:46:42.368010445Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.368133 env[1201]: time="2024-07-02T07:46:42.368114039Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.368255 env[1201]: time="2024-07-02T07:46:42.368236098Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 2 07:46:42.368525 env[1201]: time="2024-07-02T07:46:42.368493360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.368630 env[1201]: time="2024-07-02T07:46:42.368611672Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.368736 env[1201]: time="2024-07-02T07:46:42.368716829Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.368848 env[1201]: time="2024-07-02T07:46:42.368829300Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 2 07:46:42.368961 env[1201]: time="2024-07-02T07:46:42.368937874Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 2 07:46:42.369063 env[1201]: time="2024-07-02T07:46:42.369043632Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 2 07:46:42.369175 env[1201]: time="2024-07-02T07:46:42.369155612Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 2 07:46:42.369301 env[1201]: time="2024-07-02T07:46:42.369284113Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 2 07:46:42.369647 env[1201]: time="2024-07-02T07:46:42.369587512Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 2 07:46:42.370219 env[1201]: time="2024-07-02T07:46:42.369775455Z" level=info msg="Connect containerd service" Jul 2 07:46:42.370219 env[1201]: time="2024-07-02T07:46:42.369833093Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 2 07:46:42.371093 env[1201]: time="2024-07-02T07:46:42.371075623Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:46:42.371761 env[1201]: time="2024-07-02T07:46:42.371715092Z" level=info msg="Start subscribing containerd event" Jul 2 07:46:42.373606 locksmithd[1225]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 2 07:46:42.374342 env[1201]: time="2024-07-02T07:46:42.374286795Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 2 07:46:42.374387 env[1201]: time="2024-07-02T07:46:42.374365362Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 2 07:46:42.374441 systemd[1]: Started containerd.service. Jul 2 07:46:42.374660 env[1201]: time="2024-07-02T07:46:42.374636471Z" level=info msg="Start recovering state" Jul 2 07:46:42.374773 env[1201]: time="2024-07-02T07:46:42.374757678Z" level=info msg="Start event monitor" Jul 2 07:46:42.374855 env[1201]: time="2024-07-02T07:46:42.374837177Z" level=info msg="Start snapshots syncer" Jul 2 07:46:42.374925 env[1201]: time="2024-07-02T07:46:42.374907980Z" level=info msg="Start cni network conf syncer for default" Jul 2 07:46:42.374995 env[1201]: time="2024-07-02T07:46:42.374977430Z" level=info msg="Start streaming server" Jul 2 07:46:42.375499 env[1201]: time="2024-07-02T07:46:42.375393571Z" level=info msg="containerd successfully booted in 0.074859s" Jul 2 07:46:42.664885 tar[1196]: linux-amd64/LICENSE Jul 2 07:46:42.665005 tar[1196]: linux-amd64/README.md Jul 2 07:46:42.668532 systemd[1]: Finished prepare-helm.service. Jul 2 07:46:42.831774 sshd_keygen[1191]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 2 07:46:42.848396 systemd[1]: Finished sshd-keygen.service. Jul 2 07:46:42.850794 systemd[1]: Starting issuegen.service... Jul 2 07:46:42.855029 systemd[1]: issuegen.service: Deactivated successfully. Jul 2 07:46:42.855147 systemd[1]: Finished issuegen.service. Jul 2 07:46:42.857114 systemd[1]: Starting systemd-user-sessions.service... Jul 2 07:46:42.861653 systemd[1]: Finished systemd-user-sessions.service. Jul 2 07:46:42.863586 systemd[1]: Started getty@tty1.service. Jul 2 07:46:42.865267 systemd[1]: Started serial-getty@ttyS0.service. Jul 2 07:46:42.866236 systemd[1]: Reached target getty.target. Jul 2 07:46:43.446554 systemd-networkd[1015]: eth0: Gained IPv6LL Jul 2 07:46:43.448259 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 2 07:46:43.449623 systemd[1]: Reached target network-online.target. Jul 2 07:46:43.451845 systemd[1]: Starting kubelet.service... Jul 2 07:46:43.985302 systemd[1]: Started kubelet.service. Jul 2 07:46:43.986620 systemd[1]: Reached target multi-user.target. Jul 2 07:46:43.988526 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 2 07:46:43.994600 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 2 07:46:43.994715 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 2 07:46:43.995885 systemd[1]: Startup finished in 608ms (kernel) + 4.317s (initrd) + 5.992s (userspace) = 10.918s. Jul 2 07:46:44.454536 kubelet[1254]: E0702 07:46:44.454398 1254 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:46:44.456563 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:46:44.456691 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:46:51.973806 systemd[1]: Created slice system-sshd.slice. Jul 2 07:46:51.974731 systemd[1]: Started sshd@0-10.0.0.78:22-10.0.0.1:50948.service. Jul 2 07:46:52.012848 sshd[1264]: Accepted publickey for core from 10.0.0.1 port 50948 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.014132 sshd[1264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.021901 systemd-logind[1186]: New session 1 of user core. Jul 2 07:46:52.022716 systemd[1]: Created slice user-500.slice. Jul 2 07:46:52.023610 systemd[1]: Starting user-runtime-dir@500.service... Jul 2 07:46:52.030469 systemd[1]: Finished user-runtime-dir@500.service. Jul 2 07:46:52.031536 systemd[1]: Starting user@500.service... Jul 2 07:46:52.034248 (systemd)[1267]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.103219 systemd[1267]: Queued start job for default target default.target. Jul 2 07:46:52.103714 systemd[1267]: Reached target paths.target. Jul 2 07:46:52.103736 systemd[1267]: Reached target sockets.target. Jul 2 07:46:52.103748 systemd[1267]: Reached target timers.target. Jul 2 07:46:52.103759 systemd[1267]: Reached target basic.target. Jul 2 07:46:52.103794 systemd[1267]: Reached target default.target. Jul 2 07:46:52.103818 systemd[1267]: Startup finished in 63ms. Jul 2 07:46:52.103891 systemd[1]: Started user@500.service. Jul 2 07:46:52.104904 systemd[1]: Started session-1.scope. Jul 2 07:46:52.155960 systemd[1]: Started sshd@1-10.0.0.78:22-10.0.0.1:50960.service. Jul 2 07:46:52.192043 sshd[1276]: Accepted publickey for core from 10.0.0.1 port 50960 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.193321 sshd[1276]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.197694 systemd-logind[1186]: New session 2 of user core. Jul 2 07:46:52.198590 systemd[1]: Started session-2.scope. Jul 2 07:46:52.252474 sshd[1276]: pam_unix(sshd:session): session closed for user core Jul 2 07:46:52.255228 systemd[1]: sshd@1-10.0.0.78:22-10.0.0.1:50960.service: Deactivated successfully. Jul 2 07:46:52.255758 systemd[1]: session-2.scope: Deactivated successfully. Jul 2 07:46:52.256225 systemd-logind[1186]: Session 2 logged out. Waiting for processes to exit. Jul 2 07:46:52.257150 systemd[1]: Started sshd@2-10.0.0.78:22-10.0.0.1:50972.service. Jul 2 07:46:52.257804 systemd-logind[1186]: Removed session 2. Jul 2 07:46:52.292123 sshd[1282]: Accepted publickey for core from 10.0.0.1 port 50972 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.293095 sshd[1282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.296088 systemd-logind[1186]: New session 3 of user core. Jul 2 07:46:52.296750 systemd[1]: Started session-3.scope. Jul 2 07:46:52.345889 sshd[1282]: pam_unix(sshd:session): session closed for user core Jul 2 07:46:52.348109 systemd[1]: sshd@2-10.0.0.78:22-10.0.0.1:50972.service: Deactivated successfully. Jul 2 07:46:52.348547 systemd[1]: session-3.scope: Deactivated successfully. Jul 2 07:46:52.349073 systemd-logind[1186]: Session 3 logged out. Waiting for processes to exit. Jul 2 07:46:52.349844 systemd[1]: Started sshd@3-10.0.0.78:22-10.0.0.1:33124.service. Jul 2 07:46:52.350625 systemd-logind[1186]: Removed session 3. Jul 2 07:46:52.384786 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 33124 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.385731 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.389189 systemd-logind[1186]: New session 4 of user core. Jul 2 07:46:52.390195 systemd[1]: Started session-4.scope. Jul 2 07:46:52.444936 sshd[1288]: pam_unix(sshd:session): session closed for user core Jul 2 07:46:52.447656 systemd[1]: sshd@3-10.0.0.78:22-10.0.0.1:33124.service: Deactivated successfully. Jul 2 07:46:52.448107 systemd[1]: session-4.scope: Deactivated successfully. Jul 2 07:46:52.448627 systemd-logind[1186]: Session 4 logged out. Waiting for processes to exit. Jul 2 07:46:52.449550 systemd[1]: Started sshd@4-10.0.0.78:22-10.0.0.1:33140.service. Jul 2 07:46:52.450139 systemd-logind[1186]: Removed session 4. Jul 2 07:46:52.484681 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 33140 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.485736 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.489016 systemd-logind[1186]: New session 5 of user core. Jul 2 07:46:52.489737 systemd[1]: Started session-5.scope. Jul 2 07:46:52.645737 sudo[1298]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 2 07:46:52.645961 sudo[1298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:46:52.653524 dbus-daemon[1172]: \xd0͏f*V: received setenforce notice (enforcing=388351264) Jul 2 07:46:52.655501 sudo[1298]: pam_unix(sudo:session): session closed for user root Jul 2 07:46:52.657390 sshd[1294]: pam_unix(sshd:session): session closed for user core Jul 2 07:46:52.660240 systemd[1]: sshd@4-10.0.0.78:22-10.0.0.1:33140.service: Deactivated successfully. Jul 2 07:46:52.660748 systemd[1]: session-5.scope: Deactivated successfully. Jul 2 07:46:52.661254 systemd-logind[1186]: Session 5 logged out. Waiting for processes to exit. Jul 2 07:46:52.662200 systemd[1]: Started sshd@5-10.0.0.78:22-10.0.0.1:33142.service. Jul 2 07:46:52.662786 systemd-logind[1186]: Removed session 5. Jul 2 07:46:52.698216 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 33142 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.699274 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.702654 systemd-logind[1186]: New session 6 of user core. Jul 2 07:46:52.703422 systemd[1]: Started session-6.scope. Jul 2 07:46:52.756125 sudo[1306]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 2 07:46:52.756314 sudo[1306]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:46:52.759084 sudo[1306]: pam_unix(sudo:session): session closed for user root Jul 2 07:46:52.762697 sudo[1305]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 2 07:46:52.762877 sudo[1305]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:46:52.771686 systemd[1]: Stopping audit-rules.service... Jul 2 07:46:52.772000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:46:52.773061 auditctl[1309]: No rules Jul 2 07:46:52.773497 systemd[1]: audit-rules.service: Deactivated successfully. Jul 2 07:46:52.773715 systemd[1]: Stopped audit-rules.service. Jul 2 07:46:52.773958 kernel: kauditd_printk_skb: 237 callbacks suppressed Jul 2 07:46:52.774000 kernel: audit: type=1305 audit(1719906412.772:200): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 2 07:46:52.775479 systemd[1]: Starting audit-rules.service... Jul 2 07:46:52.772000 audit[1309]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff6b4acfc0 a2=420 a3=0 items=0 ppid=1 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:52.780944 kernel: audit: type=1300 audit(1719906412.772:200): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff6b4acfc0 a2=420 a3=0 items=0 ppid=1 pid=1309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:52.783562 kernel: audit: type=1327 audit(1719906412.772:200): proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:46:52.783603 kernel: audit: type=1131 audit(1719906412.772:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.772000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 2 07:46:52.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.791413 augenrules[1326]: No rules Jul 2 07:46:52.792034 systemd[1]: Finished audit-rules.service. Jul 2 07:46:52.792855 sudo[1305]: pam_unix(sudo:session): session closed for user root Jul 2 07:46:52.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.794369 sshd[1302]: pam_unix(sshd:session): session closed for user core Jul 2 07:46:52.791000 audit[1305]: USER_END pid=1305 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.799510 systemd[1]: sshd@5-10.0.0.78:22-10.0.0.1:33142.service: Deactivated successfully. Jul 2 07:46:52.800008 systemd[1]: session-6.scope: Deactivated successfully. Jul 2 07:46:52.800570 systemd-logind[1186]: Session 6 logged out. Waiting for processes to exit. Jul 2 07:46:52.801442 kernel: audit: type=1130 audit(1719906412.790:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.801498 kernel: audit: type=1106 audit(1719906412.791:203): pid=1305 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.801523 kernel: audit: type=1104 audit(1719906412.791:204): pid=1305 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.791000 audit[1305]: CRED_DISP pid=1305 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.801500 systemd[1]: Started sshd@6-10.0.0.78:22-10.0.0.1:33156.service. Jul 2 07:46:52.802599 systemd-logind[1186]: Removed session 6. Jul 2 07:46:52.794000 audit[1302]: USER_END pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.809230 kernel: audit: type=1106 audit(1719906412.794:205): pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.809267 kernel: audit: type=1104 audit(1719906412.794:206): pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.794000 audit[1302]: CRED_DISP pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.78:22-10.0.0.1:33142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.816876 kernel: audit: type=1131 audit(1719906412.798:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.78:22-10.0.0.1:33142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.78:22-10.0.0.1:33156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.841000 audit[1332]: USER_ACCT pid=1332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.842143 sshd[1332]: Accepted publickey for core from 10.0.0.1 port 33156 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:46:52.842000 audit[1332]: CRED_ACQ pid=1332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.842000 audit[1332]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe53c363d0 a2=3 a3=0 items=0 ppid=1 pid=1332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:52.842000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:46:52.843065 sshd[1332]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:46:52.846659 systemd-logind[1186]: New session 7 of user core. Jul 2 07:46:52.847650 systemd[1]: Started session-7.scope. Jul 2 07:46:52.851000 audit[1332]: USER_START pid=1332 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.852000 audit[1334]: CRED_ACQ pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:46:52.898000 audit[1335]: USER_ACCT pid=1335 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.898000 audit[1335]: CRED_REFR pid=1335 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.899685 sudo[1335]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 2 07:46:52.899871 sudo[1335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 2 07:46:52.900000 audit[1335]: USER_START pid=1335 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:46:52.919868 systemd[1]: Starting docker.service... Jul 2 07:46:52.956522 env[1347]: time="2024-07-02T07:46:52.956471996Z" level=info msg="Starting up" Jul 2 07:46:52.957617 env[1347]: time="2024-07-02T07:46:52.957596852Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:46:52.957688 env[1347]: time="2024-07-02T07:46:52.957670618Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:46:52.957779 env[1347]: time="2024-07-02T07:46:52.957758813Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:46:52.957846 env[1347]: time="2024-07-02T07:46:52.957830001Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:46:52.959400 env[1347]: time="2024-07-02T07:46:52.959368975Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 2 07:46:52.959469 env[1347]: time="2024-07-02T07:46:52.959451788Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 2 07:46:52.959541 env[1347]: time="2024-07-02T07:46:52.959521422Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 2 07:46:52.959615 env[1347]: time="2024-07-02T07:46:52.959598032Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 2 07:46:53.193882 env[1347]: time="2024-07-02T07:46:53.193789838Z" level=info msg="Loading containers: start." Jul 2 07:46:53.241000 audit[1381]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.241000 audit[1381]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc1d047920 a2=0 a3=7ffc1d04790c items=0 ppid=1347 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.241000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 2 07:46:53.242000 audit[1383]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.242000 audit[1383]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffea1f12510 a2=0 a3=7ffea1f124fc items=0 ppid=1347 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.242000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 2 07:46:53.244000 audit[1385]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.244000 audit[1385]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff8b4458f0 a2=0 a3=7fff8b4458dc items=0 ppid=1347 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.244000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:46:53.245000 audit[1387]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1387 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.245000 audit[1387]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe35b3cca0 a2=0 a3=7ffe35b3cc8c items=0 ppid=1347 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.245000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:46:53.247000 audit[1389]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.247000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd6285d0b0 a2=0 a3=7ffd6285d09c items=0 ppid=1347 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.247000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 2 07:46:53.267000 audit[1394]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.267000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcf6c5fc70 a2=0 a3=7ffcf6c5fc5c items=0 ppid=1347 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 2 07:46:53.460000 audit[1396]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.460000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffafb71360 a2=0 a3=7fffafb7134c items=0 ppid=1347 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.460000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 2 07:46:53.461000 audit[1398]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.461000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffda8fec510 a2=0 a3=7ffda8fec4fc items=0 ppid=1347 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.461000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 2 07:46:53.463000 audit[1400]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.463000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff46b7e8c0 a2=0 a3=7fff46b7e8ac items=0 ppid=1347 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.463000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:46:53.588000 audit[1404]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.588000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff0d6afee0 a2=0 a3=7fff0d6afecc items=0 ppid=1347 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.588000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:46:53.588000 audit[1405]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.588000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffea467f10 a2=0 a3=7fffea467efc items=0 ppid=1347 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.588000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:46:53.597342 kernel: Initializing XFRM netlink socket Jul 2 07:46:53.623122 env[1347]: time="2024-07-02T07:46:53.623086454Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 2 07:46:53.636000 audit[1413]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.636000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc53e78cb0 a2=0 a3=7ffc53e78c9c items=0 ppid=1347 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.636000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 2 07:46:53.646000 audit[1416]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.646000 audit[1416]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffee5902cb0 a2=0 a3=7ffee5902c9c items=0 ppid=1347 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.646000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 2 07:46:53.648000 audit[1419]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.648000 audit[1419]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcf8952a80 a2=0 a3=7ffcf8952a6c items=0 ppid=1347 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.648000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 2 07:46:53.650000 audit[1421]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.650000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdec2e02d0 a2=0 a3=7ffdec2e02bc items=0 ppid=1347 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.650000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 2 07:46:53.651000 audit[1423]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.651000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fffc5145680 a2=0 a3=7fffc514566c items=0 ppid=1347 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.651000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 2 07:46:53.653000 audit[1425]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.653000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe833e54e0 a2=0 a3=7ffe833e54cc items=0 ppid=1347 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.653000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 2 07:46:53.654000 audit[1427]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.654000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffede54ab00 a2=0 a3=7ffede54aaec items=0 ppid=1347 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.654000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 2 07:46:53.660000 audit[1430]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.660000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffca7fbf5d0 a2=0 a3=7ffca7fbf5bc items=0 ppid=1347 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 2 07:46:53.662000 audit[1432]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.662000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff1cd89220 a2=0 a3=7fff1cd8920c items=0 ppid=1347 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 2 07:46:53.664000 audit[1434]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.664000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdf395c850 a2=0 a3=7ffdf395c83c items=0 ppid=1347 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 2 07:46:53.665000 audit[1436]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.665000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffebae547d0 a2=0 a3=7ffebae547bc items=0 ppid=1347 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.665000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 2 07:46:53.666207 systemd-networkd[1015]: docker0: Link UP Jul 2 07:46:53.819000 audit[1440]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.819000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd39535490 a2=0 a3=7ffd3953547c items=0 ppid=1347 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.819000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:46:53.820000 audit[1441]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:46:53.820000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcc6a73cc0 a2=0 a3=7ffcc6a73cac items=0 ppid=1347 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:46:53.820000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 2 07:46:53.821813 env[1347]: time="2024-07-02T07:46:53.821781496Z" level=info msg="Loading containers: done." Jul 2 07:46:53.905212 env[1347]: time="2024-07-02T07:46:53.905134902Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 2 07:46:53.905416 env[1347]: time="2024-07-02T07:46:53.905367543Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 2 07:46:53.905503 env[1347]: time="2024-07-02T07:46:53.905479726Z" level=info msg="Daemon has completed initialization" Jul 2 07:46:54.120528 systemd[1]: Started docker.service. Jul 2 07:46:54.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:54.125001 env[1347]: time="2024-07-02T07:46:54.124964626Z" level=info msg="API listen on /run/docker.sock" Jul 2 07:46:54.707449 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 2 07:46:54.707682 systemd[1]: Stopped kubelet.service. Jul 2 07:46:54.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:54.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:54.709179 systemd[1]: Starting kubelet.service... Jul 2 07:46:54.723733 env[1201]: time="2024-07-02T07:46:54.723670349Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\"" Jul 2 07:46:54.829604 systemd[1]: Started kubelet.service. Jul 2 07:46:54.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:46:54.963045 kubelet[1487]: E0702 07:46:54.962922 1487 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:46:54.966186 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:46:54.966300 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:46:54.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:46:55.596908 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount314599273.mount: Deactivated successfully. Jul 2 07:46:57.225809 env[1201]: time="2024-07-02T07:46:57.225736689Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:57.227647 env[1201]: time="2024-07-02T07:46:57.227613537Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3af2ab51e136465590d968a2052e02e180fc7967a03724b269c1337e8f09d36f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:57.230398 env[1201]: time="2024-07-02T07:46:57.230363772Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:57.232163 env[1201]: time="2024-07-02T07:46:57.232122056Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:f4d993b3d73cc0d59558be584b5b40785b4a96874bc76873b69d1dd818485e70,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:57.233035 env[1201]: time="2024-07-02T07:46:57.233002404Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.6\" returns image reference \"sha256:3af2ab51e136465590d968a2052e02e180fc7967a03724b269c1337e8f09d36f\"" Jul 2 07:46:57.241711 env[1201]: time="2024-07-02T07:46:57.241656819Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\"" Jul 2 07:46:59.334331 env[1201]: time="2024-07-02T07:46:59.334249798Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:59.337335 env[1201]: time="2024-07-02T07:46:59.337276242Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:083b81fc09e858d3e0d4b42f567a9d44a2232b60bac396a94cbdd7ce1098235e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:59.339395 env[1201]: time="2024-07-02T07:46:59.339369759Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:59.340985 env[1201]: time="2024-07-02T07:46:59.340937408Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:692fc3f88a60b3afc76492ad347306d34042000f56f230959e9367fd59c48b1e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:46:59.341621 env[1201]: time="2024-07-02T07:46:59.341583964Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.6\" returns image reference \"sha256:083b81fc09e858d3e0d4b42f567a9d44a2232b60bac396a94cbdd7ce1098235e\"" Jul 2 07:46:59.350283 env[1201]: time="2024-07-02T07:46:59.350257484Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\"" Jul 2 07:47:00.793123 env[1201]: time="2024-07-02T07:47:00.793055569Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:00.797290 env[1201]: time="2024-07-02T07:47:00.797184320Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:49d9b8328a8fda6ebca6b3226c6d722d92ec7adffff18668511a88058444cf15,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:00.799254 env[1201]: time="2024-07-02T07:47:00.799218203Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:00.801141 env[1201]: time="2024-07-02T07:47:00.801114002Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:b91a4e45debd0d5336d9f533aefdf47d4b39b24071feb459e521709b9e4ec24f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:00.802034 env[1201]: time="2024-07-02T07:47:00.801994652Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.6\" returns image reference \"sha256:49d9b8328a8fda6ebca6b3226c6d722d92ec7adffff18668511a88058444cf15\"" Jul 2 07:47:00.809845 env[1201]: time="2024-07-02T07:47:00.809811722Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\"" Jul 2 07:47:01.936902 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1694746620.mount: Deactivated successfully. Jul 2 07:47:03.329302 env[1201]: time="2024-07-02T07:47:03.329243254Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:03.361444 env[1201]: time="2024-07-02T07:47:03.361386643Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c49592198fa15b509fe4ee4a538067866776e325d6dd33c77ad6647e1d3aac9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:03.389729 env[1201]: time="2024-07-02T07:47:03.389676843Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.29.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:03.450153 env[1201]: time="2024-07-02T07:47:03.450125790Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:88bacb3e1d6c0c37c6da95c6d6b8e30531d0b4d0ab540cc290b0af51fbfebd90,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:03.450571 env[1201]: time="2024-07-02T07:47:03.450530195Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.6\" returns image reference \"sha256:9c49592198fa15b509fe4ee4a538067866776e325d6dd33c77ad6647e1d3aac9\"" Jul 2 07:47:03.458636 env[1201]: time="2024-07-02T07:47:03.458605312Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Jul 2 07:47:04.291139 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1652100307.mount: Deactivated successfully. Jul 2 07:47:05.217101 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 2 07:47:05.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:05.217278 systemd[1]: Stopped kubelet.service. Jul 2 07:47:05.218506 systemd[1]: Starting kubelet.service... Jul 2 07:47:05.221742 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 2 07:47:05.221796 kernel: audit: type=1130 audit(1719906425.216:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:05.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:05.227714 kernel: audit: type=1131 audit(1719906425.216:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:05.287698 systemd[1]: Started kubelet.service. Jul 2 07:47:05.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:05.291358 kernel: audit: type=1130 audit(1719906425.286:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:05.629726 kubelet[1526]: E0702 07:47:05.629597 1526 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 2 07:47:05.631768 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 2 07:47:05.631889 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 2 07:47:05.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:05.635330 kernel: audit: type=1131 audit(1719906425.630:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 2 07:47:06.242438 env[1201]: time="2024-07-02T07:47:06.242383840Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:06.321657 env[1201]: time="2024-07-02T07:47:06.321628641Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:06.367441 env[1201]: time="2024-07-02T07:47:06.367412750Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:06.412471 env[1201]: time="2024-07-02T07:47:06.412433648Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:06.413528 env[1201]: time="2024-07-02T07:47:06.413481562Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Jul 2 07:47:06.421460 env[1201]: time="2024-07-02T07:47:06.421422818Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Jul 2 07:47:08.053996 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1587533660.mount: Deactivated successfully. Jul 2 07:47:08.058694 env[1201]: time="2024-07-02T07:47:08.058661612Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:08.060325 env[1201]: time="2024-07-02T07:47:08.060269595Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:08.061617 env[1201]: time="2024-07-02T07:47:08.061582908Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:08.063135 env[1201]: time="2024-07-02T07:47:08.063099866Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:08.063570 env[1201]: time="2024-07-02T07:47:08.063538102Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Jul 2 07:47:08.072453 env[1201]: time="2024-07-02T07:47:08.072429292Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Jul 2 07:47:08.665832 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount454668639.mount: Deactivated successfully. Jul 2 07:47:11.521675 env[1201]: time="2024-07-02T07:47:11.521618768Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:11.523490 env[1201]: time="2024-07-02T07:47:11.523458241Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:11.525355 env[1201]: time="2024-07-02T07:47:11.525326849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:11.527003 env[1201]: time="2024-07-02T07:47:11.526976746Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:11.527873 env[1201]: time="2024-07-02T07:47:11.527840453Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7\"" Jul 2 07:47:13.595016 systemd[1]: Stopped kubelet.service. Jul 2 07:47:13.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:13.596830 systemd[1]: Starting kubelet.service... Jul 2 07:47:13.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:13.602128 kernel: audit: type=1130 audit(1719906433.593:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:13.602186 kernel: audit: type=1131 audit(1719906433.593:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:13.611705 systemd[1]: Reloading. Jul 2 07:47:13.667290 /usr/lib/systemd/system-generators/torcx-generator[1648]: time="2024-07-02T07:47:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:47:13.667621 /usr/lib/systemd/system-generators/torcx-generator[1648]: time="2024-07-02T07:47:13Z" level=info msg="torcx already run" Jul 2 07:47:13.970821 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:47:13.970840 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:47:13.991687 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.067792 kernel: audit: type=1400 audit(1719906434.059:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.067846 kernel: audit: type=1400 audit(1719906434.059:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.067873 kernel: audit: type=1400 audit(1719906434.059:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.070824 kernel: audit: type=1400 audit(1719906434.059:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.076685 kernel: audit: type=1400 audit(1719906434.059:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.076731 kernel: audit: type=1400 audit(1719906434.059:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.082484 kernel: audit: type=1400 audit(1719906434.059:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.082541 kernel: audit: type=1400 audit(1719906434.059:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit: BPF prog-id=46 op=LOAD Jul 2 07:47:14.066000 audit: BPF prog-id=40 op=UNLOAD Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit: BPF prog-id=47 op=LOAD Jul 2 07:47:14.072000 audit: BPF prog-id=30 op=UNLOAD Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit: BPF prog-id=48 op=LOAD Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit: BPF prog-id=49 op=LOAD Jul 2 07:47:14.084000 audit: BPF prog-id=31 op=UNLOAD Jul 2 07:47:14.084000 audit: BPF prog-id=32 op=UNLOAD Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit: BPF prog-id=50 op=LOAD Jul 2 07:47:14.085000 audit: BPF prog-id=33 op=UNLOAD Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit: BPF prog-id=51 op=LOAD Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.085000 audit: BPF prog-id=52 op=LOAD Jul 2 07:47:14.085000 audit: BPF prog-id=34 op=UNLOAD Jul 2 07:47:14.085000 audit: BPF prog-id=35 op=UNLOAD Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit: BPF prog-id=53 op=LOAD Jul 2 07:47:14.088000 audit: BPF prog-id=41 op=UNLOAD Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit: BPF prog-id=54 op=LOAD Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit: BPF prog-id=55 op=LOAD Jul 2 07:47:14.088000 audit: BPF prog-id=42 op=UNLOAD Jul 2 07:47:14.088000 audit: BPF prog-id=43 op=UNLOAD Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit: BPF prog-id=56 op=LOAD Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.088000 audit: BPF prog-id=57 op=LOAD Jul 2 07:47:14.088000 audit: BPF prog-id=36 op=UNLOAD Jul 2 07:47:14.088000 audit: BPF prog-id=37 op=UNLOAD Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit: BPF prog-id=58 op=LOAD Jul 2 07:47:14.090000 audit: BPF prog-id=44 op=UNLOAD Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit: BPF prog-id=59 op=LOAD Jul 2 07:47:14.091000 audit: BPF prog-id=39 op=UNLOAD Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.091000 audit: BPF prog-id=60 op=LOAD Jul 2 07:47:14.092000 audit: BPF prog-id=38 op=UNLOAD Jul 2 07:47:14.105097 systemd[1]: Started kubelet.service. Jul 2 07:47:14.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:14.106369 systemd[1]: Stopping kubelet.service... Jul 2 07:47:14.106622 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:47:14.106787 systemd[1]: Stopped kubelet.service. Jul 2 07:47:14.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:14.108149 systemd[1]: Starting kubelet.service... Jul 2 07:47:14.178166 systemd[1]: Started kubelet.service. Jul 2 07:47:14.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:14.216843 kubelet[1696]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:14.216843 kubelet[1696]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:47:14.216843 kubelet[1696]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:14.217870 kubelet[1696]: I0702 07:47:14.217825 1696 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:47:14.489853 kubelet[1696]: I0702 07:47:14.489822 1696 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 07:47:14.489853 kubelet[1696]: I0702 07:47:14.489850 1696 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:47:14.490097 kubelet[1696]: I0702 07:47:14.490079 1696 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 07:47:14.506972 kubelet[1696]: E0702 07:47:14.506942 1696 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.78:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.509272 kubelet[1696]: I0702 07:47:14.509250 1696 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:47:14.521890 kubelet[1696]: I0702 07:47:14.521861 1696 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:47:14.522889 kubelet[1696]: I0702 07:47:14.522862 1696 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:47:14.523052 kubelet[1696]: I0702 07:47:14.523028 1696 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:47:14.523052 kubelet[1696]: I0702 07:47:14.523053 1696 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:47:14.523188 kubelet[1696]: I0702 07:47:14.523062 1696 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:47:14.523188 kubelet[1696]: I0702 07:47:14.523157 1696 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:14.523245 kubelet[1696]: I0702 07:47:14.523233 1696 kubelet.go:396] "Attempting to sync node with API server" Jul 2 07:47:14.523277 kubelet[1696]: I0702 07:47:14.523248 1696 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:47:14.523277 kubelet[1696]: I0702 07:47:14.523270 1696 kubelet.go:312] "Adding apiserver pod source" Jul 2 07:47:14.523361 kubelet[1696]: I0702 07:47:14.523283 1696 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:47:14.528537 kubelet[1696]: I0702 07:47:14.528500 1696 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:47:14.540550 kubelet[1696]: W0702 07:47:14.540507 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://10.0.0.78:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.540657 kubelet[1696]: E0702 07:47:14.540559 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.78:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.540657 kubelet[1696]: W0702 07:47:14.540563 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://10.0.0.78:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.540657 kubelet[1696]: E0702 07:47:14.540615 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.78:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.542200 kubelet[1696]: I0702 07:47:14.542176 1696 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 07:47:14.542267 kubelet[1696]: W0702 07:47:14.542225 1696 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 2 07:47:14.542677 kubelet[1696]: I0702 07:47:14.542656 1696 server.go:1256] "Started kubelet" Jul 2 07:47:14.542739 kubelet[1696]: I0702 07:47:14.542719 1696 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:47:14.543486 kubelet[1696]: I0702 07:47:14.543460 1696 server.go:461] "Adding debug handlers to kubelet server" Jul 2 07:47:14.542000 audit[1696]: AVC avc: denied { mac_admin } for pid=1696 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.542000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:14.542000 audit[1696]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000633c50 a1=c000d76090 a2=c000633c20 a3=25 items=0 ppid=1 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:14.542000 audit[1696]: AVC avc: denied { mac_admin } for pid=1696 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.542000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:14.542000 audit[1696]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00048d6a0 a1=c000d760a8 a2=c000633ce0 a3=25 items=0 ppid=1 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:14.544008 kubelet[1696]: I0702 07:47:14.543702 1696 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:47:14.544008 kubelet[1696]: I0702 07:47:14.543740 1696 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:47:14.544008 kubelet[1696]: I0702 07:47:14.543813 1696 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:47:14.544277 kubelet[1696]: I0702 07:47:14.544252 1696 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 07:47:14.544438 kubelet[1696]: I0702 07:47:14.544423 1696 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:47:14.545000 audit[1708]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.545000 audit[1708]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc2194d8d0 a2=0 a3=7ffc2194d8bc items=0 ppid=1696 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.545000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:47:14.545000 audit[1709]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.545000 audit[1709]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe23728810 a2=0 a3=7ffe237287fc items=0 ppid=1696 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.545000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:47:14.549704 kubelet[1696]: I0702 07:47:14.549416 1696 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:47:14.551181 kubelet[1696]: I0702 07:47:14.551159 1696 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 07:47:14.551242 kubelet[1696]: I0702 07:47:14.551223 1696 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 07:47:14.551656 kubelet[1696]: W0702 07:47:14.551604 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://10.0.0.78:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.551656 kubelet[1696]: E0702 07:47:14.551654 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.78:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.551755 kubelet[1696]: E0702 07:47:14.551737 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="200ms" Jul 2 07:47:14.550000 audit[1711]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.550000 audit[1711]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe0de70bd0 a2=0 a3=7ffe0de70bbc items=0 ppid=1696 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.550000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:47:14.553597 kubelet[1696]: I0702 07:47:14.553172 1696 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 07:47:14.553765 kubelet[1696]: E0702 07:47:14.553737 1696 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:47:14.552000 audit[1713]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.552000 audit[1713]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdf420f7d0 a2=0 a3=7ffdf420f7bc items=0 ppid=1696 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:47:14.554418 kubelet[1696]: I0702 07:47:14.554388 1696 factory.go:221] Registration of the containerd container factory successfully Jul 2 07:47:14.554418 kubelet[1696]: I0702 07:47:14.554408 1696 factory.go:221] Registration of the systemd container factory successfully Jul 2 07:47:14.555880 kubelet[1696]: E0702 07:47:14.555848 1696 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.78:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.78:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.17de55ca2dd28d2f default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2024-07-02 07:47:14.542636335 +0000 UTC m=+0.361074326,LastTimestamp:2024-07-02 07:47:14.542636335 +0000 UTC m=+0.361074326,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 2 07:47:14.562000 audit[1718]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1718 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.562000 audit[1718]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe8ce44490 a2=0 a3=7ffe8ce4447c items=0 ppid=1696 pid=1718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 2 07:47:14.563841 kubelet[1696]: I0702 07:47:14.563750 1696 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:47:14.563000 audit[1719]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1719 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:14.563000 audit[1719]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffa719fbc0 a2=0 a3=7fffa719fbac items=0 ppid=1696 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 2 07:47:14.564756 kubelet[1696]: I0702 07:47:14.564719 1696 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:47:14.564756 kubelet[1696]: I0702 07:47:14.564738 1696 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:47:14.564756 kubelet[1696]: I0702 07:47:14.564755 1696 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 07:47:14.564853 kubelet[1696]: E0702 07:47:14.564816 1696 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:47:14.564000 audit[1720]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1720 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.564000 audit[1720]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffdd873e20 a2=0 a3=7fffdd873e0c items=0 ppid=1696 pid=1720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.564000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:47:14.565000 audit[1722]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:14.565000 audit[1722]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcdbfb65e0 a2=0 a3=7ffcdbfb65cc items=0 ppid=1696 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.565000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 2 07:47:14.565000 audit[1723]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1723 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.565000 audit[1723]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcfa53b790 a2=0 a3=7ffcfa53b77c items=0 ppid=1696 pid=1723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:47:14.567129 kubelet[1696]: W0702 07:47:14.566796 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://10.0.0.78:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.566000 audit[1724]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1724 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:14.566000 audit[1724]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6040e0c0 a2=0 a3=7ffd6040e0ac items=0 ppid=1696 pid=1724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:47:14.567000 audit[1726]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1726 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:14.567000 audit[1726]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcf614a580 a2=0 a3=7ffcf614a56c items=0 ppid=1696 pid=1726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.567000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 2 07:47:14.569101 kubelet[1696]: E0702 07:47:14.567613 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.78:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:14.569000 audit[1730]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1730 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:14.569000 audit[1730]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffddc868ff0 a2=0 a3=7ffddc868fdc items=0 ppid=1696 pid=1730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 2 07:47:14.570963 kubelet[1696]: I0702 07:47:14.570936 1696 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:47:14.570963 kubelet[1696]: I0702 07:47:14.570955 1696 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:47:14.571028 kubelet[1696]: I0702 07:47:14.570971 1696 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:14.651607 kubelet[1696]: I0702 07:47:14.651572 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:47:14.651960 kubelet[1696]: E0702 07:47:14.651925 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.78:6443/api/v1/nodes\": dial tcp 10.0.0.78:6443: connect: connection refused" node="localhost" Jul 2 07:47:14.665242 kubelet[1696]: E0702 07:47:14.665212 1696 kubelet.go:2353] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 2 07:47:14.753094 kubelet[1696]: E0702 07:47:14.753010 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="400ms" Jul 2 07:47:14.827984 kubelet[1696]: I0702 07:47:14.827932 1696 policy_none.go:49] "None policy: Start" Jul 2 07:47:14.828589 kubelet[1696]: I0702 07:47:14.828571 1696 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 07:47:14.828634 kubelet[1696]: I0702 07:47:14.828596 1696 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:47:14.835151 systemd[1]: Created slice kubepods.slice. Jul 2 07:47:14.839511 systemd[1]: Created slice kubepods-burstable.slice. Jul 2 07:47:14.842308 systemd[1]: Created slice kubepods-besteffort.slice. Jul 2 07:47:14.848946 kubelet[1696]: I0702 07:47:14.848924 1696 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:47:14.847000 audit[1696]: AVC avc: denied { mac_admin } for pid=1696 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:14.847000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:14.847000 audit[1696]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005f0f60 a1=c000610b58 a2=c0005f0f30 a3=25 items=0 ppid=1 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:14.847000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:14.849144 kubelet[1696]: I0702 07:47:14.848988 1696 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:47:14.849294 kubelet[1696]: I0702 07:47:14.849194 1696 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:47:14.850192 kubelet[1696]: E0702 07:47:14.850170 1696 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 2 07:47:14.853585 kubelet[1696]: I0702 07:47:14.853546 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:47:14.853864 kubelet[1696]: E0702 07:47:14.853838 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.78:6443/api/v1/nodes\": dial tcp 10.0.0.78:6443: connect: connection refused" node="localhost" Jul 2 07:47:14.865977 kubelet[1696]: I0702 07:47:14.865935 1696 topology_manager.go:215] "Topology Admit Handler" podUID="58a6b9a60432e1bc1c6e78658ef1f65a" podNamespace="kube-system" podName="kube-apiserver-localhost" Jul 2 07:47:14.866741 kubelet[1696]: I0702 07:47:14.866709 1696 topology_manager.go:215] "Topology Admit Handler" podUID="42b008e702ec2a5b396aebedf13804b4" podNamespace="kube-system" podName="kube-controller-manager-localhost" Jul 2 07:47:14.867238 kubelet[1696]: I0702 07:47:14.867216 1696 topology_manager.go:215] "Topology Admit Handler" podUID="593d08bacb1d5de22dcb8f5224a99e3c" podNamespace="kube-system" podName="kube-scheduler-localhost" Jul 2 07:47:14.871806 systemd[1]: Created slice kubepods-burstable-pod58a6b9a60432e1bc1c6e78658ef1f65a.slice. Jul 2 07:47:14.891520 systemd[1]: Created slice kubepods-burstable-pod42b008e702ec2a5b396aebedf13804b4.slice. Jul 2 07:47:14.897905 systemd[1]: Created slice kubepods-burstable-pod593d08bacb1d5de22dcb8f5224a99e3c.slice. Jul 2 07:47:14.951863 kubelet[1696]: I0702 07:47:14.951816 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/58a6b9a60432e1bc1c6e78658ef1f65a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"58a6b9a60432e1bc1c6e78658ef1f65a\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:14.951863 kubelet[1696]: I0702 07:47:14.951852 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:14.951988 kubelet[1696]: I0702 07:47:14.951871 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:14.951988 kubelet[1696]: I0702 07:47:14.951917 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:14.952054 kubelet[1696]: I0702 07:47:14.952008 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:14.952088 kubelet[1696]: I0702 07:47:14.952067 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/593d08bacb1d5de22dcb8f5224a99e3c-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"593d08bacb1d5de22dcb8f5224a99e3c\") " pod="kube-system/kube-scheduler-localhost" Jul 2 07:47:14.952120 kubelet[1696]: I0702 07:47:14.952106 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/58a6b9a60432e1bc1c6e78658ef1f65a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"58a6b9a60432e1bc1c6e78658ef1f65a\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:14.952152 kubelet[1696]: I0702 07:47:14.952125 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/58a6b9a60432e1bc1c6e78658ef1f65a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"58a6b9a60432e1bc1c6e78658ef1f65a\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:14.952182 kubelet[1696]: I0702 07:47:14.952161 1696 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:15.154074 kubelet[1696]: E0702 07:47:15.153983 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="800ms" Jul 2 07:47:15.190203 kubelet[1696]: E0702 07:47:15.190179 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:15.190808 env[1201]: time="2024-07-02T07:47:15.190767447Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:58a6b9a60432e1bc1c6e78658ef1f65a,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:15.196904 kubelet[1696]: E0702 07:47:15.196881 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:15.197163 env[1201]: time="2024-07-02T07:47:15.197125578Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:42b008e702ec2a5b396aebedf13804b4,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:15.200383 kubelet[1696]: E0702 07:47:15.200359 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:15.200586 env[1201]: time="2024-07-02T07:47:15.200562496Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:593d08bacb1d5de22dcb8f5224a99e3c,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:15.254691 kubelet[1696]: I0702 07:47:15.254658 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:47:15.255054 kubelet[1696]: E0702 07:47:15.254990 1696 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.78:6443/api/v1/nodes\": dial tcp 10.0.0.78:6443: connect: connection refused" node="localhost" Jul 2 07:47:15.553572 kubelet[1696]: W0702 07:47:15.553439 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://10.0.0.78:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:15.553572 kubelet[1696]: E0702 07:47:15.553510 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.78:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:15.609167 kubelet[1696]: W0702 07:47:15.609121 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://10.0.0.78:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:15.609268 kubelet[1696]: E0702 07:47:15.609175 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.78:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:15.747008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2636622191.mount: Deactivated successfully. Jul 2 07:47:15.753120 env[1201]: time="2024-07-02T07:47:15.753068953Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.755690 env[1201]: time="2024-07-02T07:47:15.755657604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.757365 env[1201]: time="2024-07-02T07:47:15.757333298Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.758255 env[1201]: time="2024-07-02T07:47:15.758213529Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.759908 env[1201]: time="2024-07-02T07:47:15.759872636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.760908 env[1201]: time="2024-07-02T07:47:15.760890295Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.762828 env[1201]: time="2024-07-02T07:47:15.762783881Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.763651 env[1201]: time="2024-07-02T07:47:15.763615882Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.764496 env[1201]: time="2024-07-02T07:47:15.764465372Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.767063 env[1201]: time="2024-07-02T07:47:15.767030605Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.768843 env[1201]: time="2024-07-02T07:47:15.768809168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.773039 env[1201]: time="2024-07-02T07:47:15.772975249Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:15.787054 env[1201]: time="2024-07-02T07:47:15.786962516Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:15.787054 env[1201]: time="2024-07-02T07:47:15.787021698Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:15.787054 env[1201]: time="2024-07-02T07:47:15.787031115Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:15.787261 env[1201]: time="2024-07-02T07:47:15.787222770Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/61ed424099afcdadbe184b0d00a9e4acfea4c93ef9379edbaf8804f9469a91d5 pid=1738 runtime=io.containerd.runc.v2 Jul 2 07:47:15.802408 systemd[1]: Started cri-containerd-61ed424099afcdadbe184b0d00a9e4acfea4c93ef9379edbaf8804f9469a91d5.scope. Jul 2 07:47:15.802688 env[1201]: time="2024-07-02T07:47:15.802208199Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:15.802688 env[1201]: time="2024-07-02T07:47:15.802264212Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:15.802688 env[1201]: time="2024-07-02T07:47:15.802274351Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:15.803442 env[1201]: time="2024-07-02T07:47:15.803418035Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8d7180f6968f633d68b6addb24337f9d14e351877900bbcf2ab4c87490b7bdf0 pid=1766 runtime=io.containerd.runc.v2 Jul 2 07:47:15.808160 env[1201]: time="2024-07-02T07:47:15.807490805Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:15.808160 env[1201]: time="2024-07-02T07:47:15.807520492Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:15.808357 env[1201]: time="2024-07-02T07:47:15.808329465Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:15.808573 env[1201]: time="2024-07-02T07:47:15.808549573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87cb6befc0e59a97252193025e8fbdb39943104b01d51058fca367edcea43cf5 pid=1780 runtime=io.containerd.runc.v2 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit: BPF prog-id=61 op=LOAD Jul 2 07:47:15.814000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.814000 audit[1748]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1738 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.814000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631656434323430393961666364616462653138346230643030613965 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=1738 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631656434323430393961666364616462653138346230643030613965 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.815000 audit: BPF prog-id=62 op=LOAD Jul 2 07:47:15.815000 audit[1748]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0003c87a0 items=0 ppid=1738 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.815000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631656434323430393961666364616462653138346230643030613965 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.816000 audit: BPF prog-id=63 op=LOAD Jul 2 07:47:15.816000 audit[1748]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0003c87e8 items=0 ppid=1738 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.816000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631656434323430393961666364616462653138346230643030613965 Jul 2 07:47:15.817000 audit: BPF prog-id=63 op=UNLOAD Jul 2 07:47:15.817000 audit: BPF prog-id=62 op=UNLOAD Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { perfmon } for pid=1748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit[1748]: AVC avc: denied { bpf } for pid=1748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.817000 audit: BPF prog-id=64 op=LOAD Jul 2 07:47:15.817000 audit[1748]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0003c8bf8 items=0 ppid=1738 pid=1748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631656434323430393961666364616462653138346230643030613965 Jul 2 07:47:15.819746 systemd[1]: Started cri-containerd-8d7180f6968f633d68b6addb24337f9d14e351877900bbcf2ab4c87490b7bdf0.scope. Jul 2 07:47:15.822576 systemd[1]: Started cri-containerd-87cb6befc0e59a97252193025e8fbdb39943104b01d51058fca367edcea43cf5.scope. Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.834000 audit: BPF prog-id=65 op=LOAD Jul 2 07:47:15.835000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.835000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1766 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373138306636393638663633336436386236616464623234333337 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1766 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373138306636393638663633336436386236616464623234333337 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit: BPF prog-id=66 op=LOAD Jul 2 07:47:15.836000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a9050 items=0 ppid=1766 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373138306636393638663633336436386236616464623234333337 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit: BPF prog-id=67 op=LOAD Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a9098 items=0 ppid=1766 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373138306636393638663633336436386236616464623234333337 Jul 2 07:47:15.836000 audit: BPF prog-id=67 op=UNLOAD Jul 2 07:47:15.836000 audit: BPF prog-id=66 op=UNLOAD Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit: BPF prog-id=68 op=LOAD Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1780 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.836000 audit: BPF prog-id=69 op=LOAD Jul 2 07:47:15.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636236626566633065353961393732353231393330323565386662 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.836000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a94a8 items=0 ppid=1766 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864373138306636393638663633336436386236616464623234333337 Jul 2 07:47:15.837000 audit[1806]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1780 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636236626566633065353961393732353231393330323565386662 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit: BPF prog-id=70 op=LOAD Jul 2 07:47:15.837000 audit[1806]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019f0d0 items=0 ppid=1780 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636236626566633065353961393732353231393330323565386662 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit: BPF prog-id=71 op=LOAD Jul 2 07:47:15.837000 audit[1806]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019f118 items=0 ppid=1780 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636236626566633065353961393732353231393330323565386662 Jul 2 07:47:15.837000 audit: BPF prog-id=71 op=UNLOAD Jul 2 07:47:15.837000 audit: BPF prog-id=70 op=UNLOAD Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { perfmon } for pid=1806 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit[1806]: AVC avc: denied { bpf } for pid=1806 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.837000 audit: BPF prog-id=72 op=LOAD Jul 2 07:47:15.837000 audit[1806]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019f528 items=0 ppid=1780 pid=1806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636236626566633065353961393732353231393330323565386662 Jul 2 07:47:15.848373 env[1201]: time="2024-07-02T07:47:15.846483333Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:593d08bacb1d5de22dcb8f5224a99e3c,Namespace:kube-system,Attempt:0,} returns sandbox id \"61ed424099afcdadbe184b0d00a9e4acfea4c93ef9379edbaf8804f9469a91d5\"" Jul 2 07:47:15.851619 kubelet[1696]: E0702 07:47:15.851406 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:15.854082 env[1201]: time="2024-07-02T07:47:15.854057819Z" level=info msg="CreateContainer within sandbox \"61ed424099afcdadbe184b0d00a9e4acfea4c93ef9379edbaf8804f9469a91d5\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 2 07:47:15.866267 env[1201]: time="2024-07-02T07:47:15.866000512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:42b008e702ec2a5b396aebedf13804b4,Namespace:kube-system,Attempt:0,} returns sandbox id \"8d7180f6968f633d68b6addb24337f9d14e351877900bbcf2ab4c87490b7bdf0\"" Jul 2 07:47:15.867939 kubelet[1696]: E0702 07:47:15.866702 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:15.867999 env[1201]: time="2024-07-02T07:47:15.867279889Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:58a6b9a60432e1bc1c6e78658ef1f65a,Namespace:kube-system,Attempt:0,} returns sandbox id \"87cb6befc0e59a97252193025e8fbdb39943104b01d51058fca367edcea43cf5\"" Jul 2 07:47:15.868690 kubelet[1696]: E0702 07:47:15.868664 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:15.869387 env[1201]: time="2024-07-02T07:47:15.869354871Z" level=info msg="CreateContainer within sandbox \"8d7180f6968f633d68b6addb24337f9d14e351877900bbcf2ab4c87490b7bdf0\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 2 07:47:15.871015 env[1201]: time="2024-07-02T07:47:15.870984051Z" level=info msg="CreateContainer within sandbox \"87cb6befc0e59a97252193025e8fbdb39943104b01d51058fca367edcea43cf5\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 2 07:47:15.885437 env[1201]: time="2024-07-02T07:47:15.885370565Z" level=info msg="CreateContainer within sandbox \"61ed424099afcdadbe184b0d00a9e4acfea4c93ef9379edbaf8804f9469a91d5\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"108e50ca249e69902ec35c56aa3438633b955de999fc37f6a2297955e6846d3d\"" Jul 2 07:47:15.886105 env[1201]: time="2024-07-02T07:47:15.886067785Z" level=info msg="StartContainer for \"108e50ca249e69902ec35c56aa3438633b955de999fc37f6a2297955e6846d3d\"" Jul 2 07:47:15.893457 env[1201]: time="2024-07-02T07:47:15.893421331Z" level=info msg="CreateContainer within sandbox \"8d7180f6968f633d68b6addb24337f9d14e351877900bbcf2ab4c87490b7bdf0\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"2c4f5dd3d31d079a12d0f3aeae3b1680883ffae5e6b8a15edc914498b3f9af0a\"" Jul 2 07:47:15.893881 env[1201]: time="2024-07-02T07:47:15.893827026Z" level=info msg="StartContainer for \"2c4f5dd3d31d079a12d0f3aeae3b1680883ffae5e6b8a15edc914498b3f9af0a\"" Jul 2 07:47:15.895875 env[1201]: time="2024-07-02T07:47:15.895850640Z" level=info msg="CreateContainer within sandbox \"87cb6befc0e59a97252193025e8fbdb39943104b01d51058fca367edcea43cf5\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c308d84827b33384a7006c7b0991dc4459a7a324b8103162eab72f9a5abee6e8\"" Jul 2 07:47:15.896353 env[1201]: time="2024-07-02T07:47:15.896331102Z" level=info msg="StartContainer for \"c308d84827b33384a7006c7b0991dc4459a7a324b8103162eab72f9a5abee6e8\"" Jul 2 07:47:15.902196 systemd[1]: Started cri-containerd-108e50ca249e69902ec35c56aa3438633b955de999fc37f6a2297955e6846d3d.scope. Jul 2 07:47:15.915163 systemd[1]: Started cri-containerd-2c4f5dd3d31d079a12d0f3aeae3b1680883ffae5e6b8a15edc914498b3f9af0a.scope. Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.919000 audit: BPF prog-id=73 op=LOAD Jul 2 07:47:15.920000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.920000 audit[1867]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1738 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130386535306361323439653639393032656333356335366161333433 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1738 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130386535306361323439653639393032656333356335366161333433 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit: BPF prog-id=74 op=LOAD Jul 2 07:47:15.921000 audit[1867]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000253fb0 items=0 ppid=1738 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130386535306361323439653639393032656333356335366161333433 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit: BPF prog-id=75 op=LOAD Jul 2 07:47:15.921000 audit[1867]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000253ff8 items=0 ppid=1738 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130386535306361323439653639393032656333356335366161333433 Jul 2 07:47:15.921000 audit: BPF prog-id=75 op=UNLOAD Jul 2 07:47:15.921000 audit: BPF prog-id=74 op=UNLOAD Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { perfmon } for pid=1867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit[1867]: AVC avc: denied { bpf } for pid=1867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.921000 audit: BPF prog-id=76 op=LOAD Jul 2 07:47:15.921000 audit[1867]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000356408 items=0 ppid=1738 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130386535306361323439653639393032656333356335366161333433 Jul 2 07:47:15.920394 systemd[1]: Started cri-containerd-c308d84827b33384a7006c7b0991dc4459a7a324b8103162eab72f9a5abee6e8.scope. Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.924000 audit: BPF prog-id=77 op=LOAD Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1766 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263346635646433643331643037396131326430663361656165336231 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1766 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263346635646433643331643037396131326430663361656165336231 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit: BPF prog-id=78 op=LOAD Jul 2 07:47:15.927000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003087e0 items=0 ppid=1766 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263346635646433643331643037396131326430663361656165336231 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit: BPF prog-id=79 op=LOAD Jul 2 07:47:15.927000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000308828 items=0 ppid=1766 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263346635646433643331643037396131326430663361656165336231 Jul 2 07:47:15.927000 audit: BPF prog-id=79 op=UNLOAD Jul 2 07:47:15.927000 audit: BPF prog-id=78 op=UNLOAD Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { perfmon } for pid=1891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit[1891]: AVC avc: denied { bpf } for pid=1891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.927000 audit: BPF prog-id=80 op=LOAD Jul 2 07:47:15.927000 audit[1891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000308c38 items=0 ppid=1766 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263346635646433643331643037396131326430663361656165336231 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit: BPF prog-id=81 op=LOAD Jul 2 07:47:15.930000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1890]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1780 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303864383438323762333333383461373030366337623039393164 Jul 2 07:47:15.930000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.930000 audit[1890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1780 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303864383438323762333333383461373030366337623039393164 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit: BPF prog-id=82 op=LOAD Jul 2 07:47:15.931000 audit[1890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002d4430 items=0 ppid=1780 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303864383438323762333333383461373030366337623039393164 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit: BPF prog-id=83 op=LOAD Jul 2 07:47:15.931000 audit[1890]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002d4478 items=0 ppid=1780 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303864383438323762333333383461373030366337623039393164 Jul 2 07:47:15.931000 audit: BPF prog-id=83 op=UNLOAD Jul 2 07:47:15.931000 audit: BPF prog-id=82 op=UNLOAD Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { perfmon } for pid=1890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit[1890]: AVC avc: denied { bpf } for pid=1890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:15.931000 audit: BPF prog-id=84 op=LOAD Jul 2 07:47:15.931000 audit[1890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002d4888 items=0 ppid=1780 pid=1890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:15.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333303864383438323762333333383461373030366337623039393164 Jul 2 07:47:15.954710 env[1201]: time="2024-07-02T07:47:15.954666765Z" level=info msg="StartContainer for \"108e50ca249e69902ec35c56aa3438633b955de999fc37f6a2297955e6846d3d\" returns successfully" Jul 2 07:47:15.955352 env[1201]: time="2024-07-02T07:47:15.955331089Z" level=info msg="StartContainer for \"2c4f5dd3d31d079a12d0f3aeae3b1680883ffae5e6b8a15edc914498b3f9af0a\" returns successfully" Jul 2 07:47:15.955806 kubelet[1696]: E0702 07:47:15.955782 1696 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.78:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.78:6443: connect: connection refused" interval="1.6s" Jul 2 07:47:15.972607 env[1201]: time="2024-07-02T07:47:15.972559668Z" level=info msg="StartContainer for \"c308d84827b33384a7006c7b0991dc4459a7a324b8103162eab72f9a5abee6e8\" returns successfully" Jul 2 07:47:15.996860 kubelet[1696]: W0702 07:47:15.996775 1696 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://10.0.0.78:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:15.996860 kubelet[1696]: E0702 07:47:15.996873 1696 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.78:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.78:6443: connect: connection refused Jul 2 07:47:16.056688 kubelet[1696]: I0702 07:47:16.056642 1696 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:47:16.576409 kubelet[1696]: E0702 07:47:16.576383 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:16.588170 kubelet[1696]: E0702 07:47:16.588147 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:16.590887 kubelet[1696]: E0702 07:47:16.590873 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:16.666000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.666000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00007a210 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:16.666000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:16.666000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.666000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000c0a040 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:16.666000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:16.976000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.976000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.976000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004b40e10 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:47:16.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:47:16.976000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0050fa400 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:47:16.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:47:16.977000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.977000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004c51860 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:47:16.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:47:16.978000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.978000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c005dd43c0 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:47:16.978000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:47:16.978000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.978000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0051a20e0 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:47:16.978000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:47:16.978000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:16.978000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c005dd4480 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:47:16.978000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:47:17.127190 kubelet[1696]: I0702 07:47:17.127123 1696 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Jul 2 07:47:17.133603 kubelet[1696]: E0702 07:47:17.133573 1696 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 2 07:47:17.234142 kubelet[1696]: E0702 07:47:17.234025 1696 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 2 07:47:17.529057 kubelet[1696]: I0702 07:47:17.528939 1696 apiserver.go:52] "Watching apiserver" Jul 2 07:47:17.551848 kubelet[1696]: I0702 07:47:17.551645 1696 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 07:47:17.608711 kubelet[1696]: E0702 07:47:17.608676 1696 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 2 07:47:17.609072 kubelet[1696]: E0702 07:47:17.608727 1696 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:17.609072 kubelet[1696]: E0702 07:47:17.609036 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:17.609280 kubelet[1696]: E0702 07:47:17.609254 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:18.614706 kubelet[1696]: E0702 07:47:18.614662 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:19.594760 kubelet[1696]: E0702 07:47:19.594727 1696 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:20.272873 systemd[1]: Reloading. Jul 2 07:47:20.327966 /usr/lib/systemd/system-generators/torcx-generator[1995]: time="2024-07-02T07:47:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.5 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.5 /var/lib/torcx/store]" Jul 2 07:47:20.328258 /usr/lib/systemd/system-generators/torcx-generator[1995]: time="2024-07-02T07:47:20Z" level=info msg="torcx already run" Jul 2 07:47:20.392114 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 2 07:47:20.392131 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 2 07:47:20.408603 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 2 07:47:20.482675 kernel: kauditd_printk_skb: 581 callbacks suppressed Jul 2 07:47:20.482877 kernel: audit: type=1400 audit(1719906440.474:558): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482919 kernel: audit: type=1400 audit(1719906440.474:559): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486274 kernel: audit: type=1400 audit(1719906440.474:560): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486348 kernel: audit: type=1400 audit(1719906440.474:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.492914 kernel: audit: type=1400 audit(1719906440.474:562): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.492954 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 07:47:20.492974 kernel: audit: type=1400 audit(1719906440.474:563): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.493797 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 2 07:47:20.493845 kernel: audit: backlog limit exceeded Jul 2 07:47:20.493863 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.478000 audit: BPF prog-id=85 op=LOAD Jul 2 07:47:20.479000 audit: BPF prog-id=46 op=UNLOAD Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit: BPF prog-id=86 op=LOAD Jul 2 07:47:20.482000 audit: BPF prog-id=47 op=UNLOAD Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit: BPF prog-id=87 op=LOAD Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.482000 audit: BPF prog-id=88 op=LOAD Jul 2 07:47:20.482000 audit: BPF prog-id=48 op=UNLOAD Jul 2 07:47:20.482000 audit: BPF prog-id=49 op=UNLOAD Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.485000 audit: BPF prog-id=89 op=LOAD Jul 2 07:47:20.485000 audit: BPF prog-id=77 op=UNLOAD Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.489000 audit: BPF prog-id=90 op=LOAD Jul 2 07:47:20.489000 audit: BPF prog-id=50 op=UNLOAD Jul 2 07:47:20.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.499000 audit: BPF prog-id=92 op=LOAD Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.501000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.501000 audit: BPF prog-id=93 op=LOAD Jul 2 07:47:20.501000 audit: BPF prog-id=65 op=UNLOAD Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit: BPF prog-id=94 op=LOAD Jul 2 07:47:20.502000 audit: BPF prog-id=53 op=UNLOAD Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit: BPF prog-id=95 op=LOAD Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit: BPF prog-id=96 op=LOAD Jul 2 07:47:20.503000 audit: BPF prog-id=54 op=UNLOAD Jul 2 07:47:20.503000 audit: BPF prog-id=55 op=UNLOAD Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit: BPF prog-id=97 op=LOAD Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.503000 audit: BPF prog-id=98 op=LOAD Jul 2 07:47:20.503000 audit: BPF prog-id=56 op=UNLOAD Jul 2 07:47:20.503000 audit: BPF prog-id=57 op=UNLOAD Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit: BPF prog-id=99 op=LOAD Jul 2 07:47:20.504000 audit: BPF prog-id=81 op=UNLOAD Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit: BPF prog-id=100 op=LOAD Jul 2 07:47:20.505000 audit: BPF prog-id=61 op=UNLOAD Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.505000 audit: BPF prog-id=101 op=LOAD Jul 2 07:47:20.505000 audit: BPF prog-id=58 op=UNLOAD Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.506000 audit: BPF prog-id=102 op=LOAD Jul 2 07:47:20.506000 audit: BPF prog-id=59 op=UNLOAD Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.507000 audit: BPF prog-id=103 op=LOAD Jul 2 07:47:20.507000 audit: BPF prog-id=60 op=UNLOAD Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit: BPF prog-id=104 op=LOAD Jul 2 07:47:20.508000 audit: BPF prog-id=68 op=UNLOAD Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.508000 audit: BPF prog-id=105 op=LOAD Jul 2 07:47:20.508000 audit: BPF prog-id=73 op=UNLOAD Jul 2 07:47:20.519141 systemd[1]: Stopping kubelet.service... Jul 2 07:47:20.540515 systemd[1]: kubelet.service: Deactivated successfully. Jul 2 07:47:20.540662 systemd[1]: Stopped kubelet.service. Jul 2 07:47:20.542476 systemd[1]: Starting kubelet.service... Jul 2 07:47:20.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:20.615211 systemd[1]: Started kubelet.service. Jul 2 07:47:20.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:20.680178 kubelet[2038]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:20.680178 kubelet[2038]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 2 07:47:20.680178 kubelet[2038]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 2 07:47:20.680532 kubelet[2038]: I0702 07:47:20.680215 2038 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 2 07:47:20.684213 kubelet[2038]: I0702 07:47:20.684179 2038 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Jul 2 07:47:20.684213 kubelet[2038]: I0702 07:47:20.684211 2038 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 2 07:47:20.684495 kubelet[2038]: I0702 07:47:20.684469 2038 server.go:919] "Client rotation is on, will bootstrap in background" Jul 2 07:47:20.685904 kubelet[2038]: I0702 07:47:20.685882 2038 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 2 07:47:20.688001 kubelet[2038]: I0702 07:47:20.687943 2038 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 2 07:47:20.700330 kubelet[2038]: I0702 07:47:20.700282 2038 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 2 07:47:20.700503 kubelet[2038]: I0702 07:47:20.700481 2038 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 2 07:47:20.700676 kubelet[2038]: I0702 07:47:20.700654 2038 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Jul 2 07:47:20.700756 kubelet[2038]: I0702 07:47:20.700678 2038 topology_manager.go:138] "Creating topology manager with none policy" Jul 2 07:47:20.700756 kubelet[2038]: I0702 07:47:20.700688 2038 container_manager_linux.go:301] "Creating device plugin manager" Jul 2 07:47:20.700756 kubelet[2038]: I0702 07:47:20.700717 2038 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:20.700826 kubelet[2038]: I0702 07:47:20.700785 2038 kubelet.go:396] "Attempting to sync node with API server" Jul 2 07:47:20.700826 kubelet[2038]: I0702 07:47:20.700799 2038 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 2 07:47:20.700826 kubelet[2038]: I0702 07:47:20.700819 2038 kubelet.go:312] "Adding apiserver pod source" Jul 2 07:47:20.700886 kubelet[2038]: I0702 07:47:20.700832 2038 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 2 07:47:20.705496 kubelet[2038]: I0702 07:47:20.705476 2038 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 2 07:47:20.705739 kubelet[2038]: I0702 07:47:20.705727 2038 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 2 07:47:20.706170 kubelet[2038]: I0702 07:47:20.706158 2038 server.go:1256] "Started kubelet" Jul 2 07:47:20.706564 kubelet[2038]: I0702 07:47:20.706553 2038 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Jul 2 07:47:20.707363 kubelet[2038]: I0702 07:47:20.707350 2038 server.go:461] "Adding debug handlers to kubelet server" Jul 2 07:47:20.707000 audit[2038]: AVC avc: denied { mac_admin } for pid=2038 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.707000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:20.707000 audit[2038]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a86e10 a1=c000afc600 a2=c000a86de0 a3=25 items=0 ppid=1 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:20.707000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:20.708478 kubelet[2038]: I0702 07:47:20.707497 2038 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 2 07:47:20.708000 audit[2038]: AVC avc: denied { mac_admin } for pid=2038 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.708000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:20.708000 audit[2038]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000da24c0 a1=c000654450 a2=c000c23290 a3=25 items=0 ppid=1 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:20.708000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:20.708854 kubelet[2038]: I0702 07:47:20.708837 2038 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 2 07:47:20.708958 kubelet[2038]: I0702 07:47:20.708946 2038 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 2 07:47:20.709057 kubelet[2038]: I0702 07:47:20.709032 2038 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 2 07:47:20.709202 kubelet[2038]: I0702 07:47:20.709179 2038 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 2 07:47:20.712071 kubelet[2038]: I0702 07:47:20.712041 2038 volume_manager.go:291] "Starting Kubelet Volume Manager" Jul 2 07:47:20.712174 kubelet[2038]: I0702 07:47:20.712155 2038 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Jul 2 07:47:20.712295 kubelet[2038]: I0702 07:47:20.712277 2038 reconciler_new.go:29] "Reconciler: start to sync state" Jul 2 07:47:20.720245 kubelet[2038]: E0702 07:47:20.720205 2038 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 2 07:47:20.721877 kubelet[2038]: I0702 07:47:20.721454 2038 factory.go:221] Registration of the containerd container factory successfully Jul 2 07:47:20.721877 kubelet[2038]: I0702 07:47:20.721469 2038 factory.go:221] Registration of the systemd container factory successfully Jul 2 07:47:20.721877 kubelet[2038]: I0702 07:47:20.721520 2038 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 2 07:47:20.733394 kubelet[2038]: I0702 07:47:20.733367 2038 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 2 07:47:20.734077 kubelet[2038]: I0702 07:47:20.734053 2038 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 2 07:47:20.734077 kubelet[2038]: I0702 07:47:20.734078 2038 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 2 07:47:20.734141 kubelet[2038]: I0702 07:47:20.734092 2038 kubelet.go:2329] "Starting kubelet main sync loop" Jul 2 07:47:20.734141 kubelet[2038]: E0702 07:47:20.734134 2038 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 2 07:47:20.750158 kubelet[2038]: I0702 07:47:20.750119 2038 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 2 07:47:20.750158 kubelet[2038]: I0702 07:47:20.750152 2038 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 2 07:47:20.750277 kubelet[2038]: I0702 07:47:20.750167 2038 state_mem.go:36] "Initialized new in-memory state store" Jul 2 07:47:20.750301 kubelet[2038]: I0702 07:47:20.750279 2038 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 2 07:47:20.750301 kubelet[2038]: I0702 07:47:20.750297 2038 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 2 07:47:20.750399 kubelet[2038]: I0702 07:47:20.750303 2038 policy_none.go:49] "None policy: Start" Jul 2 07:47:20.750968 kubelet[2038]: I0702 07:47:20.750953 2038 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 2 07:47:20.751061 kubelet[2038]: I0702 07:47:20.751049 2038 state_mem.go:35] "Initializing new in-memory state store" Jul 2 07:47:20.751276 kubelet[2038]: I0702 07:47:20.751264 2038 state_mem.go:75] "Updated machine memory state" Jul 2 07:47:20.754858 kubelet[2038]: I0702 07:47:20.754845 2038 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 2 07:47:20.754000 audit[2038]: AVC avc: denied { mac_admin } for pid=2038 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:20.754000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 2 07:47:20.754000 audit[2038]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00108b290 a1=c000afd8f0 a2=c00108b260 a3=25 items=0 ppid=1 pid=2038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:20.754000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 2 07:47:20.755161 kubelet[2038]: I0702 07:47:20.755146 2038 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 2 07:47:20.755414 kubelet[2038]: I0702 07:47:20.755404 2038 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 2 07:47:20.815219 kubelet[2038]: I0702 07:47:20.815135 2038 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Jul 2 07:47:20.821416 kubelet[2038]: I0702 07:47:20.821384 2038 kubelet_node_status.go:112] "Node was previously registered" node="localhost" Jul 2 07:47:20.821497 kubelet[2038]: I0702 07:47:20.821483 2038 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Jul 2 07:47:20.835184 kubelet[2038]: I0702 07:47:20.835153 2038 topology_manager.go:215] "Topology Admit Handler" podUID="593d08bacb1d5de22dcb8f5224a99e3c" podNamespace="kube-system" podName="kube-scheduler-localhost" Jul 2 07:47:20.835259 kubelet[2038]: I0702 07:47:20.835246 2038 topology_manager.go:215] "Topology Admit Handler" podUID="58a6b9a60432e1bc1c6e78658ef1f65a" podNamespace="kube-system" podName="kube-apiserver-localhost" Jul 2 07:47:20.835330 kubelet[2038]: I0702 07:47:20.835297 2038 topology_manager.go:215] "Topology Admit Handler" podUID="42b008e702ec2a5b396aebedf13804b4" podNamespace="kube-system" podName="kube-controller-manager-localhost" Jul 2 07:47:20.841471 kubelet[2038]: E0702 07:47:20.841387 2038 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:21.013921 kubelet[2038]: I0702 07:47:21.013869 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/58a6b9a60432e1bc1c6e78658ef1f65a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"58a6b9a60432e1bc1c6e78658ef1f65a\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:21.013921 kubelet[2038]: I0702 07:47:21.013929 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/58a6b9a60432e1bc1c6e78658ef1f65a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"58a6b9a60432e1bc1c6e78658ef1f65a\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:21.014115 kubelet[2038]: I0702 07:47:21.013996 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:21.014115 kubelet[2038]: I0702 07:47:21.014044 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/593d08bacb1d5de22dcb8f5224a99e3c-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"593d08bacb1d5de22dcb8f5224a99e3c\") " pod="kube-system/kube-scheduler-localhost" Jul 2 07:47:21.014115 kubelet[2038]: I0702 07:47:21.014084 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/58a6b9a60432e1bc1c6e78658ef1f65a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"58a6b9a60432e1bc1c6e78658ef1f65a\") " pod="kube-system/kube-apiserver-localhost" Jul 2 07:47:21.014183 kubelet[2038]: I0702 07:47:21.014137 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:21.014224 kubelet[2038]: I0702 07:47:21.014204 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:21.014251 kubelet[2038]: I0702 07:47:21.014243 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:21.014293 kubelet[2038]: I0702 07:47:21.014281 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/42b008e702ec2a5b396aebedf13804b4-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"42b008e702ec2a5b396aebedf13804b4\") " pod="kube-system/kube-controller-manager-localhost" Jul 2 07:47:21.139391 kubelet[2038]: E0702 07:47:21.139264 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:21.139669 kubelet[2038]: E0702 07:47:21.139651 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:21.142020 kubelet[2038]: E0702 07:47:21.142002 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:21.705886 kubelet[2038]: I0702 07:47:21.705827 2038 apiserver.go:52] "Watching apiserver" Jul 2 07:47:21.713199 kubelet[2038]: I0702 07:47:21.713173 2038 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Jul 2 07:47:21.744241 kubelet[2038]: E0702 07:47:21.743458 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:21.744241 kubelet[2038]: E0702 07:47:21.743879 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:21.750013 kubelet[2038]: E0702 07:47:21.749994 2038 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 2 07:47:21.750451 kubelet[2038]: E0702 07:47:21.750437 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:21.777834 kubelet[2038]: I0702 07:47:21.777802 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.7777548730000001 podStartE2EDuration="1.777754873s" podCreationTimestamp="2024-07-02 07:47:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:21.776873026 +0000 UTC m=+1.151176097" watchObservedRunningTime="2024-07-02 07:47:21.777754873 +0000 UTC m=+1.152057934" Jul 2 07:47:21.799180 kubelet[2038]: I0702 07:47:21.799136 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.799096568 podStartE2EDuration="1.799096568s" podCreationTimestamp="2024-07-02 07:47:20 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:21.790851703 +0000 UTC m=+1.165154764" watchObservedRunningTime="2024-07-02 07:47:21.799096568 +0000 UTC m=+1.173399639" Jul 2 07:47:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0005017a0 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0005017e0 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0005018e0 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:47:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000501900 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:22.744882 kubelet[2038]: E0702 07:47:22.744854 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:22.745184 kubelet[2038]: E0702 07:47:22.744882 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:23.746485 kubelet[2038]: E0702 07:47:23.746451 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:24.624454 sudo[1335]: pam_unix(sudo:session): session closed for user root Jul 2 07:47:24.623000 audit[1335]: USER_END pid=1335 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:24.623000 audit[1335]: CRED_DISP pid=1335 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 2 07:47:24.625679 sshd[1332]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:24.625000 audit[1332]: USER_END pid=1332 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:24.625000 audit[1332]: CRED_DISP pid=1332 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:24.627862 systemd[1]: sshd@6-10.0.0.78:22-10.0.0.1:33156.service: Deactivated successfully. Jul 2 07:47:24.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.78:22-10.0.0.1:33156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:24.628582 systemd[1]: session-7.scope: Deactivated successfully. Jul 2 07:47:24.628706 systemd[1]: session-7.scope: Consumed 3.722s CPU time. Jul 2 07:47:24.629067 systemd-logind[1186]: Session 7 logged out. Waiting for processes to exit. Jul 2 07:47:24.629673 systemd-logind[1186]: Removed session 7. Jul 2 07:47:25.678355 kubelet[2038]: E0702 07:47:25.678306 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:25.688225 kubelet[2038]: I0702 07:47:25.688186 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=7.687158088 podStartE2EDuration="7.687158088s" podCreationTimestamp="2024-07-02 07:47:18 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:21.799779218 +0000 UTC m=+1.174082289" watchObservedRunningTime="2024-07-02 07:47:25.687158088 +0000 UTC m=+5.061461149" Jul 2 07:47:25.749214 kubelet[2038]: E0702 07:47:25.749179 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:27.080054 update_engine[1193]: I0702 07:47:27.080001 1193 update_attempter.cc:509] Updating boot flags... Jul 2 07:47:30.975807 kubelet[2038]: E0702 07:47:30.975770 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:31.755508 kubelet[2038]: E0702 07:47:31.755481 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:32.341146 kubelet[2038]: E0702 07:47:32.341118 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:32.633354 kernel: kauditd_printk_skb: 305 callbacks suppressed Jul 2 07:47:32.633477 kernel: audit: type=1400 audit(1719906452.626:796): avc: denied { watch } for pid=1917 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 07:47:32.633498 kernel: audit: type=1300 audit(1719906452.626:796): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013b2b00 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:32.626000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521006 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 2 07:47:32.626000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013b2b00 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:47:32.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:32.641988 kernel: audit: type=1327 audit(1719906452.626:796): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:47:32.756644 kubelet[2038]: E0702 07:47:32.756607 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:33.967844 kubelet[2038]: I0702 07:47:33.967815 2038 kuberuntime_manager.go:1529] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 2 07:47:33.968240 env[1201]: time="2024-07-02T07:47:33.968146352Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 2 07:47:33.968532 kubelet[2038]: I0702 07:47:33.968339 2038 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 2 07:47:35.002682 kubelet[2038]: I0702 07:47:35.002638 2038 topology_manager.go:215] "Topology Admit Handler" podUID="92d1a1e1-385e-4aa4-9b6d-597fa6d0b525" podNamespace="kube-system" podName="kube-proxy-5z2nq" Jul 2 07:47:35.009895 systemd[1]: Created slice kubepods-besteffort-pod92d1a1e1_385e_4aa4_9b6d_597fa6d0b525.slice. Jul 2 07:47:35.098149 kubelet[2038]: I0702 07:47:35.098108 2038 topology_manager.go:215] "Topology Admit Handler" podUID="7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3" podNamespace="tigera-operator" podName="tigera-operator-76c4974c85-zhlv5" Jul 2 07:47:35.104041 systemd[1]: Created slice kubepods-besteffort-pod7dc1c6d5_f04a_43c8_97ec_0e7fd316aaa3.slice. Jul 2 07:47:35.104859 kubelet[2038]: I0702 07:47:35.104753 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3-var-lib-calico\") pod \"tigera-operator-76c4974c85-zhlv5\" (UID: \"7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3\") " pod="tigera-operator/tigera-operator-76c4974c85-zhlv5" Jul 2 07:47:35.104859 kubelet[2038]: I0702 07:47:35.104826 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/92d1a1e1-385e-4aa4-9b6d-597fa6d0b525-kube-proxy\") pod \"kube-proxy-5z2nq\" (UID: \"92d1a1e1-385e-4aa4-9b6d-597fa6d0b525\") " pod="kube-system/kube-proxy-5z2nq" Jul 2 07:47:35.104941 kubelet[2038]: I0702 07:47:35.104858 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/92d1a1e1-385e-4aa4-9b6d-597fa6d0b525-xtables-lock\") pod \"kube-proxy-5z2nq\" (UID: \"92d1a1e1-385e-4aa4-9b6d-597fa6d0b525\") " pod="kube-system/kube-proxy-5z2nq" Jul 2 07:47:35.104941 kubelet[2038]: I0702 07:47:35.104894 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/92d1a1e1-385e-4aa4-9b6d-597fa6d0b525-lib-modules\") pod \"kube-proxy-5z2nq\" (UID: \"92d1a1e1-385e-4aa4-9b6d-597fa6d0b525\") " pod="kube-system/kube-proxy-5z2nq" Jul 2 07:47:35.104941 kubelet[2038]: I0702 07:47:35.104926 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-psbjb\" (UniqueName: \"kubernetes.io/projected/7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3-kube-api-access-psbjb\") pod \"tigera-operator-76c4974c85-zhlv5\" (UID: \"7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3\") " pod="tigera-operator/tigera-operator-76c4974c85-zhlv5" Jul 2 07:47:35.105028 kubelet[2038]: I0702 07:47:35.104958 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-g82gv\" (UniqueName: \"kubernetes.io/projected/92d1a1e1-385e-4aa4-9b6d-597fa6d0b525-kube-api-access-g82gv\") pod \"kube-proxy-5z2nq\" (UID: \"92d1a1e1-385e-4aa4-9b6d-597fa6d0b525\") " pod="kube-system/kube-proxy-5z2nq" Jul 2 07:47:35.316364 kubelet[2038]: E0702 07:47:35.316237 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:35.317264 env[1201]: time="2024-07-02T07:47:35.317223373Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5z2nq,Uid:92d1a1e1-385e-4aa4-9b6d-597fa6d0b525,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:35.334078 env[1201]: time="2024-07-02T07:47:35.333984301Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:35.334078 env[1201]: time="2024-07-02T07:47:35.334025543Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:35.334078 env[1201]: time="2024-07-02T07:47:35.334036839Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:35.334279 env[1201]: time="2024-07-02T07:47:35.334183507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef63e80ecc7da4ff6ba85a2de57c5deb768688f40c7f76ad12b0356ef7373f3c pid=2150 runtime=io.containerd.runc.v2 Jul 2 07:47:35.352354 systemd[1]: Started cri-containerd-ef63e80ecc7da4ff6ba85a2de57c5deb768688f40c7f76ad12b0356ef7373f3c.scope. Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.371282 kernel: audit: type=1400 audit(1719906455.363:797): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.371345 kernel: audit: type=1400 audit(1719906455.363:798): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.371368 kernel: audit: type=1400 audit(1719906455.363:799): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.375263 kernel: audit: type=1400 audit(1719906455.363:800): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.383206 kernel: audit: type=1400 audit(1719906455.363:801): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.383258 kernel: audit: type=1400 audit(1719906455.363:802): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391158 kernel: audit: type=1400 audit(1719906455.363:803): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit: BPF prog-id=106 op=LOAD Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566363365383065636337646134666636626138356132646535376335 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566363365383065636337646134666636626138356132646535376335 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.370000 audit: BPF prog-id=107 op=LOAD Jul 2 07:47:35.370000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00024fdc0 items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.370000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566363365383065636337646134666636626138356132646535376335 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.379000 audit: BPF prog-id=108 op=LOAD Jul 2 07:47:35.379000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00024fe08 items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566363365383065636337646134666636626138356132646535376335 Jul 2 07:47:35.391000 audit: BPF prog-id=108 op=UNLOAD Jul 2 07:47:35.391000 audit: BPF prog-id=107 op=UNLOAD Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { perfmon } for pid=2160 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit[2160]: AVC avc: denied { bpf } for pid=2160 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.391000 audit: BPF prog-id=109 op=LOAD Jul 2 07:47:35.391000 audit[2160]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039c218 items=0 ppid=2150 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566363365383065636337646134666636626138356132646535376335 Jul 2 07:47:35.401737 env[1201]: time="2024-07-02T07:47:35.401692382Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5z2nq,Uid:92d1a1e1-385e-4aa4-9b6d-597fa6d0b525,Namespace:kube-system,Attempt:0,} returns sandbox id \"ef63e80ecc7da4ff6ba85a2de57c5deb768688f40c7f76ad12b0356ef7373f3c\"" Jul 2 07:47:35.402471 kubelet[2038]: E0702 07:47:35.402448 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:35.405116 env[1201]: time="2024-07-02T07:47:35.405037242Z" level=info msg="CreateContainer within sandbox \"ef63e80ecc7da4ff6ba85a2de57c5deb768688f40c7f76ad12b0356ef7373f3c\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 2 07:47:35.407165 env[1201]: time="2024-07-02T07:47:35.407126169Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-zhlv5,Uid:7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3,Namespace:tigera-operator,Attempt:0,}" Jul 2 07:47:35.428498 env[1201]: time="2024-07-02T07:47:35.428441115Z" level=info msg="CreateContainer within sandbox \"ef63e80ecc7da4ff6ba85a2de57c5deb768688f40c7f76ad12b0356ef7373f3c\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"32b5ac7e6d73fed9da3ae1a8ed801f2fc80bc0c7ae8b49b8d949babb44807d90\"" Jul 2 07:47:35.429167 env[1201]: time="2024-07-02T07:47:35.429127942Z" level=info msg="StartContainer for \"32b5ac7e6d73fed9da3ae1a8ed801f2fc80bc0c7ae8b49b8d949babb44807d90\"" Jul 2 07:47:35.429928 env[1201]: time="2024-07-02T07:47:35.429787660Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:35.429928 env[1201]: time="2024-07-02T07:47:35.429847795Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:35.429928 env[1201]: time="2024-07-02T07:47:35.429863028Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:35.431145 env[1201]: time="2024-07-02T07:47:35.430408129Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3bff0169ee67ceeb2775e3d58442342ff7c272cd44136f823961af4fc7fe4c9 pid=2190 runtime=io.containerd.runc.v2 Jul 2 07:47:35.443397 systemd[1]: Started cri-containerd-e3bff0169ee67ceeb2775e3d58442342ff7c272cd44136f823961af4fc7fe4c9.scope. Jul 2 07:47:35.455202 systemd[1]: Started cri-containerd-32b5ac7e6d73fed9da3ae1a8ed801f2fc80bc0c7ae8b49b8d949babb44807d90.scope. Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.457000 audit: BPF prog-id=110 op=LOAD Jul 2 07:47:35.458000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.458000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533626666303136396565363763656562323737356533643538343432 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533626666303136396565363763656562323737356533643538343432 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.459000 audit: BPF prog-id=111 op=LOAD Jul 2 07:47:35.459000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003de610 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533626666303136396565363763656562323737356533643538343432 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.460000 audit: BPF prog-id=112 op=LOAD Jul 2 07:47:35.460000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003de658 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.460000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533626666303136396565363763656562323737356533643538343432 Jul 2 07:47:35.461000 audit: BPF prog-id=112 op=UNLOAD Jul 2 07:47:35.461000 audit: BPF prog-id=111 op=UNLOAD Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { perfmon } for pid=2202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit[2202]: AVC avc: denied { bpf } for pid=2202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.461000 audit: BPF prog-id=113 op=LOAD Jul 2 07:47:35.461000 audit[2202]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003dea68 items=0 ppid=2190 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533626666303136396565363763656562323737356533643538343432 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f1e4fed3b18 items=0 ppid=2150 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332623561633765366437336665643964613361653161386564383031 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.466000 audit: BPF prog-id=114 op=LOAD Jul 2 07:47:35.466000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003a6718 items=0 ppid=2150 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332623561633765366437336665643964613361653161386564383031 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit: BPF prog-id=115 op=LOAD Jul 2 07:47:35.467000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003a6768 items=0 ppid=2150 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332623561633765366437336665643964613361653161386564383031 Jul 2 07:47:35.467000 audit: BPF prog-id=115 op=UNLOAD Jul 2 07:47:35.467000 audit: BPF prog-id=114 op=UNLOAD Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { perfmon } for pid=2214 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit[2214]: AVC avc: denied { bpf } for pid=2214 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:35.467000 audit: BPF prog-id=116 op=LOAD Jul 2 07:47:35.467000 audit[2214]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003a67f8 items=0 ppid=2150 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332623561633765366437336665643964613361653161386564383031 Jul 2 07:47:35.484532 env[1201]: time="2024-07-02T07:47:35.484500153Z" level=info msg="StartContainer for \"32b5ac7e6d73fed9da3ae1a8ed801f2fc80bc0c7ae8b49b8d949babb44807d90\" returns successfully" Jul 2 07:47:35.489712 env[1201]: time="2024-07-02T07:47:35.489687759Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-76c4974c85-zhlv5,Uid:7dc1c6d5-f04a-43c8-97ec-0e7fd316aaa3,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"e3bff0169ee67ceeb2775e3d58442342ff7c272cd44136f823961af4fc7fe4c9\"" Jul 2 07:47:35.491503 env[1201]: time="2024-07-02T07:47:35.491485624Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\"" Jul 2 07:47:35.538000 audit[2286]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.538000 audit[2286]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb8370120 a2=0 a3=7ffeb837010c items=0 ppid=2236 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.538000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:47:35.538000 audit[2287]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.538000 audit[2287]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2269fee0 a2=0 a3=7ffc2269fecc items=0 ppid=2236 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.538000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 2 07:47:35.539000 audit[2288]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.539000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd58dd9c0 a2=0 a3=7ffcd58dd9ac items=0 ppid=2236 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:47:35.539000 audit[2289]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.539000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbc043fc0 a2=0 a3=7ffcbc043fac items=0 ppid=2236 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.539000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 2 07:47:35.541000 audit[2291]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.541000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffbcddee00 a2=0 a3=7fffbcddedec items=0 ppid=2236 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.541000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:47:35.541000 audit[2290]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.541000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0755b940 a2=0 a3=7ffd0755b92c items=0 ppid=2236 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 2 07:47:35.642000 audit[2292]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.642000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe67f1e6c0 a2=0 a3=7ffe67f1e6ac items=0 ppid=2236 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.642000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:47:35.644000 audit[2294]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.644000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffea1341dc0 a2=0 a3=7ffea1341dac items=0 ppid=2236 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 2 07:47:35.649000 audit[2297]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.649000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe43b034b0 a2=0 a3=7ffe43b0349c items=0 ppid=2236 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.649000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 2 07:47:35.650000 audit[2298]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.650000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7c1c4e80 a2=0 a3=7ffc7c1c4e6c items=0 ppid=2236 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:47:35.653000 audit[2300]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.653000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc96929a10 a2=0 a3=7ffc969299fc items=0 ppid=2236 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:47:35.654000 audit[2301]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.654000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef917a440 a2=0 a3=7ffef917a42c items=0 ppid=2236 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:47:35.656000 audit[2303]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2303 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.656000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe0d9346b0 a2=0 a3=7ffe0d93469c items=0 ppid=2236 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:47:35.659000 audit[2306]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.659000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc9ce70d50 a2=0 a3=7ffc9ce70d3c items=0 ppid=2236 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.659000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 2 07:47:35.660000 audit[2307]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.660000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa7be7bf0 a2=0 a3=7fffa7be7bdc items=0 ppid=2236 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.660000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:47:35.662000 audit[2309]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.662000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe23602d90 a2=0 a3=7ffe23602d7c items=0 ppid=2236 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.662000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:47:35.663000 audit[2310]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.663000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdb0ca3140 a2=0 a3=7ffdb0ca312c items=0 ppid=2236 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.663000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:47:35.665000 audit[2312]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.665000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcabdf58c0 a2=0 a3=7ffcabdf58ac items=0 ppid=2236 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.665000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:47:35.668000 audit[2315]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.668000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff4ffd1b80 a2=0 a3=7fff4ffd1b6c items=0 ppid=2236 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.668000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:47:35.671000 audit[2318]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.671000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff9b494e80 a2=0 a3=7fff9b494e6c items=0 ppid=2236 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.671000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:47:35.672000 audit[2319]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.672000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc92c07360 a2=0 a3=7ffc92c0734c items=0 ppid=2236 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:47:35.674000 audit[2321]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.674000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff1e5cf3b0 a2=0 a3=7fff1e5cf39c items=0 ppid=2236 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.674000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:47:35.677000 audit[2324]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.677000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe96c1acf0 a2=0 a3=7ffe96c1acdc items=0 ppid=2236 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.677000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:47:35.677000 audit[2325]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.677000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb7ffe0c0 a2=0 a3=7ffcb7ffe0ac items=0 ppid=2236 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.677000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:47:35.679000 audit[2327]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 2 07:47:35.679000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffccbac0b50 a2=0 a3=7ffccbac0b3c items=0 ppid=2236 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.679000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:47:35.697000 audit[2333]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:35.697000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffe10aff870 a2=0 a3=7ffe10aff85c items=0 ppid=2236 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.697000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:35.709000 audit[2333]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:35.709000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe10aff870 a2=0 a3=7ffe10aff85c items=0 ppid=2236 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.709000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:35.710000 audit[2339]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.710000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe33795990 a2=0 a3=7ffe3379597c items=0 ppid=2236 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.710000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 2 07:47:35.713000 audit[2341]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.713000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc734747c0 a2=0 a3=7ffc734747ac items=0 ppid=2236 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.713000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 2 07:47:35.716000 audit[2344]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.716000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff3f5c5160 a2=0 a3=7fff3f5c514c items=0 ppid=2236 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.716000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 2 07:47:35.717000 audit[2345]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.717000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe453d42d0 a2=0 a3=7ffe453d42bc items=0 ppid=2236 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.717000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 2 07:47:35.720000 audit[2347]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.720000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe1dddd430 a2=0 a3=7ffe1dddd41c items=0 ppid=2236 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.720000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 2 07:47:35.721000 audit[2348]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.721000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4a85d1a0 a2=0 a3=7ffc4a85d18c items=0 ppid=2236 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 2 07:47:35.723000 audit[2350]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.723000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffddcc6dc40 a2=0 a3=7ffddcc6dc2c items=0 ppid=2236 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.723000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 2 07:47:35.726000 audit[2353]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.726000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe8ed86900 a2=0 a3=7ffe8ed868ec items=0 ppid=2236 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.726000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 2 07:47:35.727000 audit[2354]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.727000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5c480c50 a2=0 a3=7ffd5c480c3c items=0 ppid=2236 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 2 07:47:35.729000 audit[2356]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.729000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd3ac5de30 a2=0 a3=7ffd3ac5de1c items=0 ppid=2236 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 2 07:47:35.730000 audit[2357]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.730000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf05c4eb0 a2=0 a3=7ffcf05c4e9c items=0 ppid=2236 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.730000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 2 07:47:35.732000 audit[2359]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.732000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe41e19440 a2=0 a3=7ffe41e1942c items=0 ppid=2236 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.732000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 2 07:47:35.735000 audit[2362]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.735000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffda906bd0 a2=0 a3=7fffda906bbc items=0 ppid=2236 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 2 07:47:35.737000 audit[2365]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.737000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe9fd88420 a2=0 a3=7ffe9fd8840c items=0 ppid=2236 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.737000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 2 07:47:35.739000 audit[2366]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.739000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe21370950 a2=0 a3=7ffe2137093c items=0 ppid=2236 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.739000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 2 07:47:35.740000 audit[2368]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.740000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffda3b2cde0 a2=0 a3=7ffda3b2cdcc items=0 ppid=2236 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.740000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:47:35.743000 audit[2371]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.743000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd50e7da20 a2=0 a3=7ffd50e7da0c items=0 ppid=2236 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.743000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 2 07:47:35.744000 audit[2372]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2372 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.744000 audit[2372]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff95cb0090 a2=0 a3=7fff95cb007c items=0 ppid=2236 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.744000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 2 07:47:35.746000 audit[2374]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.746000 audit[2374]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffcc91df030 a2=0 a3=7ffcc91df01c items=0 ppid=2236 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.746000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 2 07:47:35.747000 audit[2375]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.747000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff91e72310 a2=0 a3=7fff91e722fc items=0 ppid=2236 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 2 07:47:35.749000 audit[2377]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.749000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff5cc2b040 a2=0 a3=7fff5cc2b02c items=0 ppid=2236 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.749000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:47:35.751000 audit[2380]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 2 07:47:35.751000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe9134a320 a2=0 a3=7ffe9134a30c items=0 ppid=2236 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.751000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 2 07:47:35.753000 audit[2382]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:47:35.753000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7fff3a05f100 a2=0 a3=7fff3a05f0ec items=0 ppid=2236 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.753000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:35.754000 audit[2382]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 2 07:47:35.754000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fff3a05f100 a2=0 a3=7fff3a05f0ec items=0 ppid=2236 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:35.754000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:35.762290 kubelet[2038]: E0702 07:47:35.762265 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:35.780554 kubelet[2038]: I0702 07:47:35.780511 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-5z2nq" podStartSLOduration=1.7804766380000001 podStartE2EDuration="1.780476638s" podCreationTimestamp="2024-07-02 07:47:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:47:35.780239618 +0000 UTC m=+15.154542689" watchObservedRunningTime="2024-07-02 07:47:35.780476638 +0000 UTC m=+15.154779709" Jul 2 07:47:36.216438 systemd[1]: run-containerd-runc-k8s.io-ef63e80ecc7da4ff6ba85a2de57c5deb768688f40c7f76ad12b0356ef7373f3c-runc.JM3EgI.mount: Deactivated successfully. Jul 2 07:47:37.367528 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount301234000.mount: Deactivated successfully. Jul 2 07:47:39.083753 env[1201]: time="2024-07-02T07:47:39.083702722Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:39.085459 env[1201]: time="2024-07-02T07:47:39.085435513Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:39.086882 env[1201]: time="2024-07-02T07:47:39.086853488Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.34.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:39.088155 env[1201]: time="2024-07-02T07:47:39.088109949Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:479ddc7ff9ab095058b96f6710bbf070abada86332e267d6e5dcc1df36ba2cc5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:39.088515 env[1201]: time="2024-07-02T07:47:39.088471558Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.34.0\" returns image reference \"sha256:01249e32d0f6f7d0ad79761d634d16738f1a5792b893f202f9a417c63034411d\"" Jul 2 07:47:39.090215 env[1201]: time="2024-07-02T07:47:39.090175367Z" level=info msg="CreateContainer within sandbox \"e3bff0169ee67ceeb2775e3d58442342ff7c272cd44136f823961af4fc7fe4c9\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 2 07:47:39.101008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2840513130.mount: Deactivated successfully. Jul 2 07:47:39.102289 env[1201]: time="2024-07-02T07:47:39.102252430Z" level=info msg="CreateContainer within sandbox \"e3bff0169ee67ceeb2775e3d58442342ff7c272cd44136f823961af4fc7fe4c9\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"389baa60b27f54e5a2df2b455eb709d3a7779ee94ee41e5c84957aa874274811\"" Jul 2 07:47:39.102746 env[1201]: time="2024-07-02T07:47:39.102679553Z" level=info msg="StartContainer for \"389baa60b27f54e5a2df2b455eb709d3a7779ee94ee41e5c84957aa874274811\"" Jul 2 07:47:39.119897 systemd[1]: Started cri-containerd-389baa60b27f54e5a2df2b455eb709d3a7779ee94ee41e5c84957aa874274811.scope. Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.132003 kernel: kauditd_printk_skb: 303 callbacks suppressed Jul 2 07:47:39.132073 kernel: audit: type=1400 audit(1719906459.129:890): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.139335 kernel: audit: type=1400 audit(1719906459.129:891): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.139385 kernel: audit: type=1400 audit(1719906459.129:892): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.141346 kernel: audit: type=1400 audit(1719906459.129:893): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.143405 kernel: audit: type=1400 audit(1719906459.129:894): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.146344 kernel: audit: type=1400 audit(1719906459.129:895): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.149203 kernel: audit: type=1400 audit(1719906459.129:896): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.152096 kernel: audit: type=1400 audit(1719906459.129:897): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.154961 kernel: audit: type=1400 audit(1719906459.129:898): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.157800 kernel: audit: type=1400 audit(1719906459.133:899): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.133000 audit: BPF prog-id=117 op=LOAD Jul 2 07:47:39.133000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.133000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2190 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338396261613630623237663534653561326466326234353565623730 Jul 2 07:47:39.133000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.133000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2190 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338396261613630623237663534653561326466326234353565623730 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.134000 audit: BPF prog-id=118 op=LOAD Jul 2 07:47:39.134000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c2020 items=0 ppid=2190 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338396261613630623237663534653561326466326234353565623730 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.136000 audit: BPF prog-id=119 op=LOAD Jul 2 07:47:39.136000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c2068 items=0 ppid=2190 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338396261613630623237663534653561326466326234353565623730 Jul 2 07:47:39.142000 audit: BPF prog-id=119 op=UNLOAD Jul 2 07:47:39.142000 audit: BPF prog-id=118 op=UNLOAD Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { perfmon } for pid=2390 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit[2390]: AVC avc: denied { bpf } for pid=2390 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:39.142000 audit: BPF prog-id=120 op=LOAD Jul 2 07:47:39.142000 audit[2390]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c2478 items=0 ppid=2190 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:39.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338396261613630623237663534653561326466326234353565623730 Jul 2 07:47:39.169514 env[1201]: time="2024-07-02T07:47:39.169474701Z" level=info msg="StartContainer for \"389baa60b27f54e5a2df2b455eb709d3a7779ee94ee41e5c84957aa874274811\" returns successfully" Jul 2 07:47:40.099027 systemd[1]: run-containerd-runc-k8s.io-389baa60b27f54e5a2df2b455eb709d3a7779ee94ee41e5c84957aa874274811-runc.nycuYH.mount: Deactivated successfully. Jul 2 07:47:41.803000 audit[2425]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:41.803000 audit[2425]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fff5415d680 a2=0 a3=7fff5415d66c items=0 ppid=2236 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:41.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:41.804000 audit[2425]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:41.804000 audit[2425]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff5415d680 a2=0 a3=0 items=0 ppid=2236 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:41.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:41.813000 audit[2427]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:41.813000 audit[2427]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffa3d4f100 a2=0 a3=7fffa3d4f0ec items=0 ppid=2236 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:41.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:41.815000 audit[2427]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:41.815000 audit[2427]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffa3d4f100 a2=0 a3=0 items=0 ppid=2236 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:41.815000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:41.919291 kubelet[2038]: I0702 07:47:41.919254 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-76c4974c85-zhlv5" podStartSLOduration=3.321184728 podStartE2EDuration="6.919197755s" podCreationTimestamp="2024-07-02 07:47:35 +0000 UTC" firstStartedPulling="2024-07-02 07:47:35.490756061 +0000 UTC m=+14.865059132" lastFinishedPulling="2024-07-02 07:47:39.088769088 +0000 UTC m=+18.463072159" observedRunningTime="2024-07-02 07:47:39.776237321 +0000 UTC m=+19.150540392" watchObservedRunningTime="2024-07-02 07:47:41.919197755 +0000 UTC m=+21.293500826" Jul 2 07:47:41.920109 kubelet[2038]: I0702 07:47:41.920078 2038 topology_manager.go:215] "Topology Admit Handler" podUID="f969fcc2-2227-49ce-966b-96d92607f5b6" podNamespace="calico-system" podName="calico-typha-5cd76f9bc7-v7jc9" Jul 2 07:47:41.923887 kubelet[2038]: W0702 07:47:41.923521 2038 reflector.go:539] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 2 07:47:41.923887 kubelet[2038]: E0702 07:47:41.923554 2038 reflector.go:147] object-"calico-system"/"typha-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 2 07:47:41.924730 systemd[1]: Created slice kubepods-besteffort-podf969fcc2_2227_49ce_966b_96d92607f5b6.slice. Jul 2 07:47:41.953201 kubelet[2038]: I0702 07:47:41.953157 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f969fcc2-2227-49ce-966b-96d92607f5b6-tigera-ca-bundle\") pod \"calico-typha-5cd76f9bc7-v7jc9\" (UID: \"f969fcc2-2227-49ce-966b-96d92607f5b6\") " pod="calico-system/calico-typha-5cd76f9bc7-v7jc9" Jul 2 07:47:41.953380 kubelet[2038]: I0702 07:47:41.953265 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/f969fcc2-2227-49ce-966b-96d92607f5b6-typha-certs\") pod \"calico-typha-5cd76f9bc7-v7jc9\" (UID: \"f969fcc2-2227-49ce-966b-96d92607f5b6\") " pod="calico-system/calico-typha-5cd76f9bc7-v7jc9" Jul 2 07:47:41.953380 kubelet[2038]: I0702 07:47:41.953329 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sbqbr\" (UniqueName: \"kubernetes.io/projected/f969fcc2-2227-49ce-966b-96d92607f5b6-kube-api-access-sbqbr\") pod \"calico-typha-5cd76f9bc7-v7jc9\" (UID: \"f969fcc2-2227-49ce-966b-96d92607f5b6\") " pod="calico-system/calico-typha-5cd76f9bc7-v7jc9" Jul 2 07:47:41.960737 kubelet[2038]: I0702 07:47:41.960691 2038 topology_manager.go:215] "Topology Admit Handler" podUID="3f8813ba-6411-4db6-b000-660164f6cbc6" podNamespace="calico-system" podName="calico-node-b2h75" Jul 2 07:47:41.965202 systemd[1]: Created slice kubepods-besteffort-pod3f8813ba_6411_4db6_b000_660164f6cbc6.slice. Jul 2 07:47:41.967307 kubelet[2038]: W0702 07:47:41.967260 2038 reflector.go:539] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 2 07:47:41.967307 kubelet[2038]: E0702 07:47:41.967299 2038 reflector.go:147] object-"calico-system"/"node-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 2 07:47:41.967307 kubelet[2038]: W0702 07:47:41.967275 2038 reflector.go:539] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 2 07:47:41.967429 kubelet[2038]: E0702 07:47:41.967327 2038 reflector.go:147] object-"calico-system"/"cni-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 2 07:47:42.054252 kubelet[2038]: I0702 07:47:42.054133 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-policysync\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054252 kubelet[2038]: I0702 07:47:42.054169 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-var-run-calico\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054252 kubelet[2038]: I0702 07:47:42.054189 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-cni-bin-dir\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054590 kubelet[2038]: I0702 07:47:42.054334 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-var-lib-calico\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054590 kubelet[2038]: I0702 07:47:42.054369 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-lib-modules\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054590 kubelet[2038]: I0702 07:47:42.054387 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-cni-net-dir\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054590 kubelet[2038]: I0702 07:47:42.054407 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-w9rwf\" (UniqueName: \"kubernetes.io/projected/3f8813ba-6411-4db6-b000-660164f6cbc6-kube-api-access-w9rwf\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054590 kubelet[2038]: I0702 07:47:42.054456 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-xtables-lock\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054728 kubelet[2038]: I0702 07:47:42.054493 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/3f8813ba-6411-4db6-b000-660164f6cbc6-node-certs\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054728 kubelet[2038]: I0702 07:47:42.054512 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-cni-log-dir\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054728 kubelet[2038]: I0702 07:47:42.054531 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3f8813ba-6411-4db6-b000-660164f6cbc6-tigera-ca-bundle\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.054728 kubelet[2038]: I0702 07:47:42.054548 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/3f8813ba-6411-4db6-b000-660164f6cbc6-flexvol-driver-host\") pod \"calico-node-b2h75\" (UID: \"3f8813ba-6411-4db6-b000-660164f6cbc6\") " pod="calico-system/calico-node-b2h75" Jul 2 07:47:42.072231 kubelet[2038]: I0702 07:47:42.072191 2038 topology_manager.go:215] "Topology Admit Handler" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" podNamespace="calico-system" podName="csi-node-driver-75nhn" Jul 2 07:47:42.072455 kubelet[2038]: E0702 07:47:42.072430 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:42.155141 kubelet[2038]: I0702 07:47:42.155101 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae-kubelet-dir\") pod \"csi-node-driver-75nhn\" (UID: \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\") " pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:42.155298 kubelet[2038]: I0702 07:47:42.155156 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae-registration-dir\") pod \"csi-node-driver-75nhn\" (UID: \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\") " pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:42.155298 kubelet[2038]: I0702 07:47:42.155183 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae-varrun\") pod \"csi-node-driver-75nhn\" (UID: \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\") " pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:42.155298 kubelet[2038]: I0702 07:47:42.155219 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae-socket-dir\") pod \"csi-node-driver-75nhn\" (UID: \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\") " pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:42.155445 kubelet[2038]: I0702 07:47:42.155332 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xp7k8\" (UniqueName: \"kubernetes.io/projected/aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae-kube-api-access-xp7k8\") pod \"csi-node-driver-75nhn\" (UID: \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\") " pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:42.156452 kubelet[2038]: E0702 07:47:42.156431 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.156452 kubelet[2038]: W0702 07:47:42.156449 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.157219 kubelet[2038]: E0702 07:47:42.157182 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.165123 kubelet[2038]: E0702 07:47:42.165105 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.165123 kubelet[2038]: W0702 07:47:42.165116 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.165229 kubelet[2038]: E0702 07:47:42.165129 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.256411 kubelet[2038]: E0702 07:47:42.256381 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.256411 kubelet[2038]: W0702 07:47:42.256399 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.256411 kubelet[2038]: E0702 07:47:42.256419 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.256621 kubelet[2038]: E0702 07:47:42.256585 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.256621 kubelet[2038]: W0702 07:47:42.256594 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.256621 kubelet[2038]: E0702 07:47:42.256604 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.256776 kubelet[2038]: E0702 07:47:42.256758 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.256776 kubelet[2038]: W0702 07:47:42.256770 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.256849 kubelet[2038]: E0702 07:47:42.256781 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.257014 kubelet[2038]: E0702 07:47:42.256997 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.257014 kubelet[2038]: W0702 07:47:42.257008 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.257095 kubelet[2038]: E0702 07:47:42.257024 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.257694 kubelet[2038]: E0702 07:47:42.257661 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.257694 kubelet[2038]: W0702 07:47:42.257674 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.257694 kubelet[2038]: E0702 07:47:42.257690 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.257989 kubelet[2038]: E0702 07:47:42.257951 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.257989 kubelet[2038]: W0702 07:47:42.257974 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.257989 kubelet[2038]: E0702 07:47:42.257998 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.258238 kubelet[2038]: E0702 07:47:42.258176 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.258238 kubelet[2038]: W0702 07:47:42.258185 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.258238 kubelet[2038]: E0702 07:47:42.258197 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.258379 kubelet[2038]: E0702 07:47:42.258363 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.258379 kubelet[2038]: W0702 07:47:42.258373 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.258461 kubelet[2038]: E0702 07:47:42.258438 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.258545 kubelet[2038]: E0702 07:47:42.258530 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.258545 kubelet[2038]: W0702 07:47:42.258539 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.258611 kubelet[2038]: E0702 07:47:42.258601 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.258703 kubelet[2038]: E0702 07:47:42.258682 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.258703 kubelet[2038]: W0702 07:47:42.258692 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.258703 kubelet[2038]: E0702 07:47:42.258704 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.258963 kubelet[2038]: E0702 07:47:42.258942 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.258963 kubelet[2038]: W0702 07:47:42.258955 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.259039 kubelet[2038]: E0702 07:47:42.259025 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.259127 kubelet[2038]: E0702 07:47:42.259116 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.259127 kubelet[2038]: W0702 07:47:42.259125 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.259215 kubelet[2038]: E0702 07:47:42.259204 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.259342 kubelet[2038]: E0702 07:47:42.259305 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.259342 kubelet[2038]: W0702 07:47:42.259336 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.259396 kubelet[2038]: E0702 07:47:42.259352 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.259597 kubelet[2038]: E0702 07:47:42.259543 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.259597 kubelet[2038]: W0702 07:47:42.259576 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.259768 kubelet[2038]: E0702 07:47:42.259615 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.259878 kubelet[2038]: E0702 07:47:42.259862 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.259878 kubelet[2038]: W0702 07:47:42.259874 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.259931 kubelet[2038]: E0702 07:47:42.259890 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.260056 kubelet[2038]: E0702 07:47:42.260041 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.260056 kubelet[2038]: W0702 07:47:42.260053 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.260116 kubelet[2038]: E0702 07:47:42.260071 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.260275 kubelet[2038]: E0702 07:47:42.260260 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.260275 kubelet[2038]: W0702 07:47:42.260270 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.260375 kubelet[2038]: E0702 07:47:42.260304 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.260419 kubelet[2038]: E0702 07:47:42.260406 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.260419 kubelet[2038]: W0702 07:47:42.260416 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.260468 kubelet[2038]: E0702 07:47:42.260432 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.260582 kubelet[2038]: E0702 07:47:42.260572 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.260582 kubelet[2038]: W0702 07:47:42.260580 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.260655 kubelet[2038]: E0702 07:47:42.260611 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.260738 kubelet[2038]: E0702 07:47:42.260726 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.260738 kubelet[2038]: W0702 07:47:42.260736 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.260787 kubelet[2038]: E0702 07:47:42.260752 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.261369 kubelet[2038]: E0702 07:47:42.261344 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.261369 kubelet[2038]: W0702 07:47:42.261365 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.261454 kubelet[2038]: E0702 07:47:42.261393 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.261559 kubelet[2038]: E0702 07:47:42.261545 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.261559 kubelet[2038]: W0702 07:47:42.261554 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.261638 kubelet[2038]: E0702 07:47:42.261567 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.261774 kubelet[2038]: E0702 07:47:42.261758 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.261774 kubelet[2038]: W0702 07:47:42.261771 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.261824 kubelet[2038]: E0702 07:47:42.261787 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.261986 kubelet[2038]: E0702 07:47:42.261965 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.261986 kubelet[2038]: W0702 07:47:42.261977 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.262056 kubelet[2038]: E0702 07:47:42.262032 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.262118 kubelet[2038]: E0702 07:47:42.262104 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.262118 kubelet[2038]: W0702 07:47:42.262114 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.262216 kubelet[2038]: E0702 07:47:42.262193 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.262424 kubelet[2038]: E0702 07:47:42.262407 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.262424 kubelet[2038]: W0702 07:47:42.262420 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.262498 kubelet[2038]: E0702 07:47:42.262436 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.262661 kubelet[2038]: E0702 07:47:42.262642 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.262661 kubelet[2038]: W0702 07:47:42.262656 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.262725 kubelet[2038]: E0702 07:47:42.262670 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.271072 kubelet[2038]: E0702 07:47:42.268850 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.271072 kubelet[2038]: W0702 07:47:42.268863 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.271072 kubelet[2038]: E0702 07:47:42.268877 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.360257 kubelet[2038]: E0702 07:47:42.360154 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.360257 kubelet[2038]: W0702 07:47:42.360174 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.360257 kubelet[2038]: E0702 07:47:42.360195 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.360471 kubelet[2038]: E0702 07:47:42.360421 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.360471 kubelet[2038]: W0702 07:47:42.360428 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.360471 kubelet[2038]: E0702 07:47:42.360439 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.461758 kubelet[2038]: E0702 07:47:42.461726 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.461758 kubelet[2038]: W0702 07:47:42.461749 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.461948 kubelet[2038]: E0702 07:47:42.461773 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.462029 kubelet[2038]: E0702 07:47:42.462010 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.462029 kubelet[2038]: W0702 07:47:42.462025 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.462100 kubelet[2038]: E0702 07:47:42.462035 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.562691 kubelet[2038]: E0702 07:47:42.562655 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.562691 kubelet[2038]: W0702 07:47:42.562673 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.562691 kubelet[2038]: E0702 07:47:42.562693 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.562908 kubelet[2038]: E0702 07:47:42.562868 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.562908 kubelet[2038]: W0702 07:47:42.562875 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.562908 kubelet[2038]: E0702 07:47:42.562884 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.663669 kubelet[2038]: E0702 07:47:42.663575 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.663669 kubelet[2038]: W0702 07:47:42.663595 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.663669 kubelet[2038]: E0702 07:47:42.663617 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.663888 kubelet[2038]: E0702 07:47:42.663862 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.663888 kubelet[2038]: W0702 07:47:42.663875 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.663888 kubelet[2038]: E0702 07:47:42.663887 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.765045 kubelet[2038]: E0702 07:47:42.765014 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.765045 kubelet[2038]: W0702 07:47:42.765029 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.765045 kubelet[2038]: E0702 07:47:42.765045 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.765278 kubelet[2038]: E0702 07:47:42.765258 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.765278 kubelet[2038]: W0702 07:47:42.765269 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.765278 kubelet[2038]: E0702 07:47:42.765278 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.829000 audit[2472]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:42.829000 audit[2472]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffc4a86ab0 a2=0 a3=7fffc4a86a9c items=0 ppid=2236 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:42.829000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:42.829000 audit[2472]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2472 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:42.829000 audit[2472]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffc4a86ab0 a2=0 a3=0 items=0 ppid=2236 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:42.829000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:42.866036 kubelet[2038]: E0702 07:47:42.866008 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.866036 kubelet[2038]: W0702 07:47:42.866024 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.866157 kubelet[2038]: E0702 07:47:42.866041 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.866195 kubelet[2038]: E0702 07:47:42.866180 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.866195 kubelet[2038]: W0702 07:47:42.866192 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.866252 kubelet[2038]: E0702 07:47:42.866200 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.967079 kubelet[2038]: E0702 07:47:42.967055 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.967079 kubelet[2038]: W0702 07:47:42.967072 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.967433 kubelet[2038]: E0702 07:47:42.967088 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:42.967433 kubelet[2038]: E0702 07:47:42.967255 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:42.967433 kubelet[2038]: W0702 07:47:42.967261 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:42.967433 kubelet[2038]: E0702 07:47:42.967270 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.031333 kubelet[2038]: E0702 07:47:43.031299 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.031333 kubelet[2038]: W0702 07:47:43.031333 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.031494 kubelet[2038]: E0702 07:47:43.031357 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.054913 kubelet[2038]: E0702 07:47:43.054891 2038 secret.go:194] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Jul 2 07:47:43.054983 kubelet[2038]: E0702 07:47:43.054959 2038 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/f969fcc2-2227-49ce-966b-96d92607f5b6-typha-certs podName:f969fcc2-2227-49ce-966b-96d92607f5b6 nodeName:}" failed. No retries permitted until 2024-07-02 07:47:43.554940018 +0000 UTC m=+22.929243079 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/f969fcc2-2227-49ce-966b-96d92607f5b6-typha-certs") pod "calico-typha-5cd76f9bc7-v7jc9" (UID: "f969fcc2-2227-49ce-966b-96d92607f5b6") : failed to sync secret cache: timed out waiting for the condition Jul 2 07:47:43.068162 kubelet[2038]: E0702 07:47:43.068148 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.068293 kubelet[2038]: W0702 07:47:43.068239 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.068293 kubelet[2038]: E0702 07:47:43.068267 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.168676 kubelet[2038]: E0702 07:47:43.168648 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:43.168814 kubelet[2038]: E0702 07:47:43.168739 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.168814 kubelet[2038]: W0702 07:47:43.168749 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.168814 kubelet[2038]: E0702 07:47:43.168766 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.169041 env[1201]: time="2024-07-02T07:47:43.169006628Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-b2h75,Uid:3f8813ba-6411-4db6-b000-660164f6cbc6,Namespace:calico-system,Attempt:0,}" Jul 2 07:47:43.224873 env[1201]: time="2024-07-02T07:47:43.224772599Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:43.224873 env[1201]: time="2024-07-02T07:47:43.224803907Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:43.224873 env[1201]: time="2024-07-02T07:47:43.224813066Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:43.224985 env[1201]: time="2024-07-02T07:47:43.224900052Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c pid=2488 runtime=io.containerd.runc.v2 Jul 2 07:47:43.238354 systemd[1]: run-containerd-runc-k8s.io-0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c-runc.IZwYpP.mount: Deactivated successfully. Jul 2 07:47:43.240431 systemd[1]: Started cri-containerd-0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c.scope. Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit: BPF prog-id=121 op=LOAD Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2488 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333335393664623761303366346362323030333661623835376666 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2488 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333335393664623761303366346362323030333661623835376666 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit: BPF prog-id=122 op=LOAD Jul 2 07:47:43.248000 audit[2498]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001dab50 items=0 ppid=2488 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333335393664623761303366346362323030333661623835376666 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.248000 audit: BPF prog-id=123 op=LOAD Jul 2 07:47:43.248000 audit[2498]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001dab98 items=0 ppid=2488 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333335393664623761303366346362323030333661623835376666 Jul 2 07:47:43.248000 audit: BPF prog-id=123 op=UNLOAD Jul 2 07:47:43.248000 audit: BPF prog-id=122 op=UNLOAD Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { perfmon } for pid=2498 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit[2498]: AVC avc: denied { bpf } for pid=2498 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.249000 audit: BPF prog-id=124 op=LOAD Jul 2 07:47:43.249000 audit[2498]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001dafa8 items=0 ppid=2488 pid=2498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065333335393664623761303366346362323030333661623835376666 Jul 2 07:47:43.260170 env[1201]: time="2024-07-02T07:47:43.260116623Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-b2h75,Uid:3f8813ba-6411-4db6-b000-660164f6cbc6,Namespace:calico-system,Attempt:0,} returns sandbox id \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\"" Jul 2 07:47:43.260746 kubelet[2038]: E0702 07:47:43.260721 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:43.263274 env[1201]: time="2024-07-02T07:47:43.263244652Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\"" Jul 2 07:47:43.270070 kubelet[2038]: E0702 07:47:43.270044 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.270070 kubelet[2038]: W0702 07:47:43.270059 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.270142 kubelet[2038]: E0702 07:47:43.270079 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.371448 kubelet[2038]: E0702 07:47:43.371411 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.371448 kubelet[2038]: W0702 07:47:43.371430 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.371448 kubelet[2038]: E0702 07:47:43.371455 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.472388 kubelet[2038]: E0702 07:47:43.472350 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.472388 kubelet[2038]: W0702 07:47:43.472365 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.472388 kubelet[2038]: E0702 07:47:43.472388 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.573479 kubelet[2038]: E0702 07:47:43.573372 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.573479 kubelet[2038]: W0702 07:47:43.573399 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.573479 kubelet[2038]: E0702 07:47:43.573419 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.573668 kubelet[2038]: E0702 07:47:43.573647 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.573698 kubelet[2038]: W0702 07:47:43.573672 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.573698 kubelet[2038]: E0702 07:47:43.573686 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.573877 kubelet[2038]: E0702 07:47:43.573858 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.573877 kubelet[2038]: W0702 07:47:43.573871 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.573999 kubelet[2038]: E0702 07:47:43.573884 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.574072 kubelet[2038]: E0702 07:47:43.574050 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.574072 kubelet[2038]: W0702 07:47:43.574064 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.574072 kubelet[2038]: E0702 07:47:43.574075 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.574287 kubelet[2038]: E0702 07:47:43.574230 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.574287 kubelet[2038]: W0702 07:47:43.574238 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.574287 kubelet[2038]: E0702 07:47:43.574250 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.576959 kubelet[2038]: E0702 07:47:43.576945 2038 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 2 07:47:43.577017 kubelet[2038]: W0702 07:47:43.576961 2038 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 2 07:47:43.577017 kubelet[2038]: E0702 07:47:43.576980 2038 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 2 07:47:43.734219 kubelet[2038]: E0702 07:47:43.734164 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:43.734388 kubelet[2038]: E0702 07:47:43.734274 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:43.734683 env[1201]: time="2024-07-02T07:47:43.734635474Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5cd76f9bc7-v7jc9,Uid:f969fcc2-2227-49ce-966b-96d92607f5b6,Namespace:calico-system,Attempt:0,}" Jul 2 07:47:43.750873 env[1201]: time="2024-07-02T07:47:43.750811271Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:47:43.750873 env[1201]: time="2024-07-02T07:47:43.750874938Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:47:43.751068 env[1201]: time="2024-07-02T07:47:43.750894499Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:47:43.751339 env[1201]: time="2024-07-02T07:47:43.751298262Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcfc424764f4580b17cf0c80599c3a18373501802897a7d1ccbfe862b264941c pid=2539 runtime=io.containerd.runc.v2 Jul 2 07:47:43.761031 systemd[1]: Started cri-containerd-bcfc424764f4580b17cf0c80599c3a18373501802897a7d1ccbfe862b264941c.scope. Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit: BPF prog-id=125 op=LOAD Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666334323437363466343538306231376366306338303539396333 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666334323437363466343538306231376366306338303539396333 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit: BPF prog-id=126 op=LOAD Jul 2 07:47:43.771000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021c980 items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666334323437363466343538306231376366306338303539396333 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.771000 audit: BPF prog-id=127 op=LOAD Jul 2 07:47:43.771000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021c9c8 items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666334323437363466343538306231376366306338303539396333 Jul 2 07:47:43.771000 audit: BPF prog-id=127 op=UNLOAD Jul 2 07:47:43.772000 audit: BPF prog-id=126 op=UNLOAD Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { perfmon } for pid=2549 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit[2549]: AVC avc: denied { bpf } for pid=2549 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:43.772000 audit: BPF prog-id=128 op=LOAD Jul 2 07:47:43.772000 audit[2549]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021cdd8 items=0 ppid=2539 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:43.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263666334323437363466343538306231376366306338303539396333 Jul 2 07:47:43.799257 env[1201]: time="2024-07-02T07:47:43.799206993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5cd76f9bc7-v7jc9,Uid:f969fcc2-2227-49ce-966b-96d92607f5b6,Namespace:calico-system,Attempt:0,} returns sandbox id \"bcfc424764f4580b17cf0c80599c3a18373501802897a7d1ccbfe862b264941c\"" Jul 2 07:47:43.799771 kubelet[2038]: E0702 07:47:43.799754 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:44.682830 env[1201]: time="2024-07-02T07:47:44.682783704Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:44.684662 env[1201]: time="2024-07-02T07:47:44.684612487Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:44.686326 env[1201]: time="2024-07-02T07:47:44.686272651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:44.687833 env[1201]: time="2024-07-02T07:47:44.687806878Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:e57c9db86f1cee1ae6f41257eed1ee2f363783177809217a2045502a09cf7cee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:44.688188 env[1201]: time="2024-07-02T07:47:44.688158185Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.28.0\" returns image reference \"sha256:587b28ecfc62e2a60919e6a39f9b25be37c77da99d8c84252716fa3a49a171b9\"" Jul 2 07:47:44.688936 env[1201]: time="2024-07-02T07:47:44.688905256Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\"" Jul 2 07:47:44.689691 env[1201]: time="2024-07-02T07:47:44.689662909Z" level=info msg="CreateContainer within sandbox \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 2 07:47:44.709102 env[1201]: time="2024-07-02T07:47:44.709052688Z" level=info msg="CreateContainer within sandbox \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07\"" Jul 2 07:47:44.711604 env[1201]: time="2024-07-02T07:47:44.709787071Z" level=info msg="StartContainer for \"fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07\"" Jul 2 07:47:44.724620 systemd[1]: Started cri-containerd-fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07.scope. Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.746278 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 2 07:47:44.746376 kernel: audit: type=1400 audit(1719906464.737:950): avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.746394 kernel: audit: type=1300 audit(1719906464.737:950): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fbe1c9c8d58 items=0 ppid=2488 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:44.737000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fbe1c9c8d58 items=0 ppid=2488 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:44.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665356661386465316464333331306536613361623535386632326238 Jul 2 07:47:44.750760 kernel: audit: type=1327 audit(1719906464.737:950): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665356661386465316464333331306536613361623535386632326238 Jul 2 07:47:44.750816 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.756483 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.759488 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.762487 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.765506 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.768874 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.768930 kernel: audit: type=1400 audit(1719906464.737:951): avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.769086 env[1201]: time="2024-07-02T07:47:44.769038452Z" level=info msg="StartContainer for \"fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07\" returns successfully" Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.737000 audit: BPF prog-id=129 op=LOAD Jul 2 07:47:44.737000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000283548 items=0 ppid=2488 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:44.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665356661386465316464333331306536613361623535386632326238 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.740000 audit: BPF prog-id=130 op=LOAD Jul 2 07:47:44.740000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000283598 items=0 ppid=2488 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:44.740000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665356661386465316464333331306536613361623535386632326238 Jul 2 07:47:44.745000 audit: BPF prog-id=130 op=UNLOAD Jul 2 07:47:44.745000 audit: BPF prog-id=129 op=UNLOAD Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:44.745000 audit: BPF prog-id=131 op=LOAD Jul 2 07:47:44.745000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000283628 items=0 ppid=2488 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:44.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665356661386465316464333331306536613361623535386632326238 Jul 2 07:47:44.774469 systemd[1]: cri-containerd-fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07.scope: Deactivated successfully. Jul 2 07:47:44.777000 audit: BPF prog-id=131 op=UNLOAD Jul 2 07:47:44.779406 kubelet[2038]: E0702 07:47:44.779385 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:45.087858 env[1201]: time="2024-07-02T07:47:45.087719288Z" level=info msg="shim disconnected" id=fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07 Jul 2 07:47:45.087858 env[1201]: time="2024-07-02T07:47:45.087773714Z" level=warning msg="cleaning up after shim disconnected" id=fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07 namespace=k8s.io Jul 2 07:47:45.087858 env[1201]: time="2024-07-02T07:47:45.087783154Z" level=info msg="cleaning up dead shim" Jul 2 07:47:45.095801 env[1201]: time="2024-07-02T07:47:45.095734802Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:47:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2626 runtime=io.containerd.runc.v2\n" Jul 2 07:47:45.222431 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fe5fa8de1dd3310e6a3ab558f22b80a7ffb9e2fa285bb157cc9e636a2b36fc07-rootfs.mount: Deactivated successfully. Jul 2 07:47:45.734445 kubelet[2038]: E0702 07:47:45.734408 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:45.783504 kubelet[2038]: E0702 07:47:45.783226 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:46.968541 env[1201]: time="2024-07-02T07:47:46.968503147Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:46.970279 env[1201]: time="2024-07-02T07:47:46.970252362Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:46.971888 env[1201]: time="2024-07-02T07:47:46.971852120Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:46.973133 env[1201]: time="2024-07-02T07:47:46.973111891Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:eff1501af12b7e27e2ef8f4e55d03d837bcb017aa5663e22e519059c452d51ed,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:46.973560 env[1201]: time="2024-07-02T07:47:46.973539834Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.28.0\" returns image reference \"sha256:a9372c0f51b54c589e5a16013ed3049b2a052dd6903d72603849fab2c4216fbc\"" Jul 2 07:47:46.974053 env[1201]: time="2024-07-02T07:47:46.974019608Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\"" Jul 2 07:47:46.983669 env[1201]: time="2024-07-02T07:47:46.983606806Z" level=info msg="CreateContainer within sandbox \"bcfc424764f4580b17cf0c80599c3a18373501802897a7d1ccbfe862b264941c\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 2 07:47:46.998291 env[1201]: time="2024-07-02T07:47:46.998254581Z" level=info msg="CreateContainer within sandbox \"bcfc424764f4580b17cf0c80599c3a18373501802897a7d1ccbfe862b264941c\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a4cd3538462caf4baf0b560812bb2c87344920e9642fd900c9a276a4351d989d\"" Jul 2 07:47:46.998773 env[1201]: time="2024-07-02T07:47:46.998745569Z" level=info msg="StartContainer for \"a4cd3538462caf4baf0b560812bb2c87344920e9642fd900c9a276a4351d989d\"" Jul 2 07:47:47.014271 systemd[1]: Started cri-containerd-a4cd3538462caf4baf0b560812bb2c87344920e9642fd900c9a276a4351d989d.scope. Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.024000 audit: BPF prog-id=132 op=LOAD Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2539 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:47.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636433353338343632636166346261663062353630383132626232 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2539 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:47.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636433353338343632636166346261663062353630383132626232 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit: BPF prog-id=133 op=LOAD Jul 2 07:47:47.025000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000280640 items=0 ppid=2539 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:47.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636433353338343632636166346261663062353630383132626232 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit: BPF prog-id=134 op=LOAD Jul 2 07:47:47.025000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000280688 items=0 ppid=2539 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:47.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636433353338343632636166346261663062353630383132626232 Jul 2 07:47:47.025000 audit: BPF prog-id=134 op=UNLOAD Jul 2 07:47:47.025000 audit: BPF prog-id=133 op=UNLOAD Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:47.025000 audit: BPF prog-id=135 op=LOAD Jul 2 07:47:47.025000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000280a98 items=0 ppid=2539 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:47.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636433353338343632636166346261663062353630383132626232 Jul 2 07:47:47.053527 env[1201]: time="2024-07-02T07:47:47.053480265Z" level=info msg="StartContainer for \"a4cd3538462caf4baf0b560812bb2c87344920e9642fd900c9a276a4351d989d\" returns successfully" Jul 2 07:47:47.735110 kubelet[2038]: E0702 07:47:47.735061 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:47.788863 kubelet[2038]: E0702 07:47:47.788839 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:47.799373 kubelet[2038]: I0702 07:47:47.799340 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-5cd76f9bc7-v7jc9" podStartSLOduration=3.625789348 podStartE2EDuration="6.799282749s" podCreationTimestamp="2024-07-02 07:47:41 +0000 UTC" firstStartedPulling="2024-07-02 07:47:43.800296773 +0000 UTC m=+23.174599844" lastFinishedPulling="2024-07-02 07:47:46.973790174 +0000 UTC m=+26.348093245" observedRunningTime="2024-07-02 07:47:47.799139417 +0000 UTC m=+27.173442488" watchObservedRunningTime="2024-07-02 07:47:47.799282749 +0000 UTC m=+27.173585820" Jul 2 07:47:48.790441 kubelet[2038]: I0702 07:47:48.790394 2038 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 07:47:48.790966 kubelet[2038]: E0702 07:47:48.790952 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:49.734606 kubelet[2038]: E0702 07:47:49.734575 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:51.059072 systemd[1]: Started sshd@7-10.0.0.78:22-10.0.0.1:48206.service. Jul 2 07:47:51.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.78:22-10.0.0.1:48206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:51.060174 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 2 07:47:51.060223 kernel: audit: type=1130 audit(1719906471.057:975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.78:22-10.0.0.1:48206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:51.179000 audit[2680]: USER_ACCT pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.181085 sshd[2680]: Accepted publickey for core from 10.0.0.1 port 48206 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:47:51.183770 sshd[2680]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:51.182000 audit[2680]: CRED_ACQ pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.186995 systemd-logind[1186]: New session 8 of user core. Jul 2 07:47:51.187692 systemd[1]: Started session-8.scope. Jul 2 07:47:51.189140 kernel: audit: type=1101 audit(1719906471.179:976): pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.189199 kernel: audit: type=1103 audit(1719906471.182:977): pid=2680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.189228 kernel: audit: type=1006 audit(1719906471.182:978): pid=2680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 2 07:47:51.182000 audit[2680]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec7485af0 a2=3 a3=0 items=0 ppid=1 pid=2680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:51.217370 kernel: audit: type=1300 audit(1719906471.182:978): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec7485af0 a2=3 a3=0 items=0 ppid=1 pid=2680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:51.182000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:47:51.218789 kernel: audit: type=1327 audit(1719906471.182:978): proctitle=737368643A20636F7265205B707269765D Jul 2 07:47:51.218869 kernel: audit: type=1105 audit(1719906471.191:979): pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.191000 audit[2680]: USER_START pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.192000 audit[2684]: CRED_ACQ pid=2684 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.226781 kernel: audit: type=1103 audit(1719906471.192:980): pid=2684 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.306070 sshd[2680]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:51.305000 audit[2680]: USER_END pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.308623 systemd[1]: sshd@7-10.0.0.78:22-10.0.0.1:48206.service: Deactivated successfully. Jul 2 07:47:51.309348 systemd[1]: session-8.scope: Deactivated successfully. Jul 2 07:47:51.305000 audit[2680]: CRED_DISP pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.314080 systemd-logind[1186]: Session 8 logged out. Waiting for processes to exit. Jul 2 07:47:51.315055 kernel: audit: type=1106 audit(1719906471.305:981): pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.315109 kernel: audit: type=1104 audit(1719906471.305:982): pid=2680 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:51.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.78:22-10.0.0.1:48206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:51.314841 systemd-logind[1186]: Removed session 8. Jul 2 07:47:51.736062 kubelet[2038]: E0702 07:47:51.736014 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:53.364688 env[1201]: time="2024-07-02T07:47:53.364628294Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:53.366512 env[1201]: time="2024-07-02T07:47:53.366490895Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:53.367967 env[1201]: time="2024-07-02T07:47:53.367944701Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:53.369519 env[1201]: time="2024-07-02T07:47:53.369492681Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:67fdc0954d3c96f9a7938fca4d5759c835b773dfb5cb513903e89d21462d886e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:47:53.369966 env[1201]: time="2024-07-02T07:47:53.369938722Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.28.0\" returns image reference \"sha256:107014d9f4c891a0235fa80b55df22451e8804ede5b891b632c5779ca3ab07a7\"" Jul 2 07:47:53.371509 env[1201]: time="2024-07-02T07:47:53.371481793Z" level=info msg="CreateContainer within sandbox \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 2 07:47:53.386342 env[1201]: time="2024-07-02T07:47:53.386277509Z" level=info msg="CreateContainer within sandbox \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0\"" Jul 2 07:47:53.387888 env[1201]: time="2024-07-02T07:47:53.386630059Z" level=info msg="StartContainer for \"1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0\"" Jul 2 07:47:53.406916 systemd[1]: Started cri-containerd-1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0.scope. Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f3b306c4568 items=0 ppid=2488 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:53.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336636313435646366633034356231316566346661303035316235 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit: BPF prog-id=136 op=LOAD Jul 2 07:47:53.418000 audit[2703]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000232a58 items=0 ppid=2488 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:53.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336636313435646366633034356231316566346661303035316235 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.418000 audit: BPF prog-id=137 op=LOAD Jul 2 07:47:53.418000 audit[2703]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000232aa8 items=0 ppid=2488 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:53.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336636313435646366633034356231316566346661303035316235 Jul 2 07:47:53.419000 audit: BPF prog-id=137 op=UNLOAD Jul 2 07:47:53.419000 audit: BPF prog-id=136 op=UNLOAD Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { perfmon } for pid=2703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit[2703]: AVC avc: denied { bpf } for pid=2703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:47:53.419000 audit: BPF prog-id=138 op=LOAD Jul 2 07:47:53.419000 audit[2703]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000232b38 items=0 ppid=2488 pid=2703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:53.419000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165336636313435646366633034356231316566346661303035316235 Jul 2 07:47:53.735056 kubelet[2038]: E0702 07:47:53.735025 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:54.116299 env[1201]: time="2024-07-02T07:47:54.116197669Z" level=info msg="StartContainer for \"1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0\" returns successfully" Jul 2 07:47:54.382789 systemd[1]: run-containerd-runc-k8s.io-1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0-runc.4gJfAz.mount: Deactivated successfully. Jul 2 07:47:54.824751 env[1201]: time="2024-07-02T07:47:54.824691330Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 2 07:47:54.826699 systemd[1]: cri-containerd-1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0.scope: Deactivated successfully. Jul 2 07:47:54.831000 audit: BPF prog-id=138 op=UNLOAD Jul 2 07:47:54.841632 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0-rootfs.mount: Deactivated successfully. Jul 2 07:47:54.849636 env[1201]: time="2024-07-02T07:47:54.849598007Z" level=info msg="shim disconnected" id=1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0 Jul 2 07:47:54.849752 env[1201]: time="2024-07-02T07:47:54.849639683Z" level=warning msg="cleaning up after shim disconnected" id=1e3f6145dcfc045b11ef4fa0051b55955d399a4911cfa72afafa3a9b07313ea0 namespace=k8s.io Jul 2 07:47:54.849752 env[1201]: time="2024-07-02T07:47:54.849649353Z" level=info msg="cleaning up dead shim" Jul 2 07:47:54.855654 env[1201]: time="2024-07-02T07:47:54.855623795Z" level=warning msg="cleanup warnings time=\"2024-07-02T07:47:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2744 runtime=io.containerd.runc.v2\n" Jul 2 07:47:54.911247 kubelet[2038]: I0702 07:47:54.911220 2038 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Jul 2 07:47:54.926862 kubelet[2038]: I0702 07:47:54.926740 2038 topology_manager.go:215] "Topology Admit Handler" podUID="a1e65ea0-0b20-4bca-bd1c-8dceff6f519a" podNamespace="kube-system" podName="coredns-76f75df574-mcrtl" Jul 2 07:47:54.927016 kubelet[2038]: I0702 07:47:54.926890 2038 topology_manager.go:215] "Topology Admit Handler" podUID="edef516b-fcf8-4723-908e-6259a8a37eff" podNamespace="kube-system" podName="coredns-76f75df574-js22z" Jul 2 07:47:54.927016 kubelet[2038]: I0702 07:47:54.926961 2038 topology_manager.go:215] "Topology Admit Handler" podUID="9157f811-aa2f-4b5b-9f96-f953e6ffd3df" podNamespace="calico-system" podName="calico-kube-controllers-85d87685d8-466ls" Jul 2 07:47:54.932444 systemd[1]: Created slice kubepods-besteffort-pod9157f811_aa2f_4b5b_9f96_f953e6ffd3df.slice. Jul 2 07:47:54.938280 systemd[1]: Created slice kubepods-burstable-podedef516b_fcf8_4723_908e_6259a8a37eff.slice. Jul 2 07:47:54.942458 systemd[1]: Created slice kubepods-burstable-poda1e65ea0_0b20_4bca_bd1c_8dceff6f519a.slice. Jul 2 07:47:55.100654 kubelet[2038]: I0702 07:47:55.100082 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9157f811-aa2f-4b5b-9f96-f953e6ffd3df-tigera-ca-bundle\") pod \"calico-kube-controllers-85d87685d8-466ls\" (UID: \"9157f811-aa2f-4b5b-9f96-f953e6ffd3df\") " pod="calico-system/calico-kube-controllers-85d87685d8-466ls" Jul 2 07:47:55.100654 kubelet[2038]: I0702 07:47:55.100124 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a1e65ea0-0b20-4bca-bd1c-8dceff6f519a-config-volume\") pod \"coredns-76f75df574-mcrtl\" (UID: \"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a\") " pod="kube-system/coredns-76f75df574-mcrtl" Jul 2 07:47:55.100654 kubelet[2038]: I0702 07:47:55.100142 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/edef516b-fcf8-4723-908e-6259a8a37eff-config-volume\") pod \"coredns-76f75df574-js22z\" (UID: \"edef516b-fcf8-4723-908e-6259a8a37eff\") " pod="kube-system/coredns-76f75df574-js22z" Jul 2 07:47:55.100654 kubelet[2038]: I0702 07:47:55.100167 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9stnc\" (UniqueName: \"kubernetes.io/projected/9157f811-aa2f-4b5b-9f96-f953e6ffd3df-kube-api-access-9stnc\") pod \"calico-kube-controllers-85d87685d8-466ls\" (UID: \"9157f811-aa2f-4b5b-9f96-f953e6ffd3df\") " pod="calico-system/calico-kube-controllers-85d87685d8-466ls" Jul 2 07:47:55.100654 kubelet[2038]: I0702 07:47:55.100186 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4kvj6\" (UniqueName: \"kubernetes.io/projected/edef516b-fcf8-4723-908e-6259a8a37eff-kube-api-access-4kvj6\") pod \"coredns-76f75df574-js22z\" (UID: \"edef516b-fcf8-4723-908e-6259a8a37eff\") " pod="kube-system/coredns-76f75df574-js22z" Jul 2 07:47:55.100897 kubelet[2038]: I0702 07:47:55.100299 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qdstm\" (UniqueName: \"kubernetes.io/projected/a1e65ea0-0b20-4bca-bd1c-8dceff6f519a-kube-api-access-qdstm\") pod \"coredns-76f75df574-mcrtl\" (UID: \"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a\") " pod="kube-system/coredns-76f75df574-mcrtl" Jul 2 07:47:55.121174 kubelet[2038]: E0702 07:47:55.121155 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:55.121860 env[1201]: time="2024-07-02T07:47:55.121830550Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\"" Jul 2 07:47:55.541719 kubelet[2038]: E0702 07:47:55.541677 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:55.545848 kubelet[2038]: E0702 07:47:55.545818 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:55.548415 env[1201]: time="2024-07-02T07:47:55.548357621Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-js22z,Uid:edef516b-fcf8-4723-908e-6259a8a37eff,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:55.548415 env[1201]: time="2024-07-02T07:47:55.548369245Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-mcrtl,Uid:a1e65ea0-0b20-4bca-bd1c-8dceff6f519a,Namespace:kube-system,Attempt:0,}" Jul 2 07:47:55.548676 env[1201]: time="2024-07-02T07:47:55.548369014Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85d87685d8-466ls,Uid:9157f811-aa2f-4b5b-9f96-f953e6ffd3df,Namespace:calico-system,Attempt:0,}" Jul 2 07:47:55.650789 env[1201]: time="2024-07-02T07:47:55.650696935Z" level=error msg="Failed to destroy network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.652710 env[1201]: time="2024-07-02T07:47:55.652646958Z" level=error msg="encountered an error cleaning up failed sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.652783 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950-shm.mount: Deactivated successfully. Jul 2 07:47:55.653572 env[1201]: time="2024-07-02T07:47:55.653285442Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-mcrtl,Uid:a1e65ea0-0b20-4bca-bd1c-8dceff6f519a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.654281 kubelet[2038]: E0702 07:47:55.653888 2038 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.654281 kubelet[2038]: E0702 07:47:55.653944 2038 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-mcrtl" Jul 2 07:47:55.654281 kubelet[2038]: E0702 07:47:55.653968 2038 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-mcrtl" Jul 2 07:47:55.654445 kubelet[2038]: E0702 07:47:55.654043 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-mcrtl_kube-system(a1e65ea0-0b20-4bca-bd1c-8dceff6f519a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-mcrtl_kube-system(a1e65ea0-0b20-4bca-bd1c-8dceff6f519a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-mcrtl" podUID="a1e65ea0-0b20-4bca-bd1c-8dceff6f519a" Jul 2 07:47:55.658022 env[1201]: time="2024-07-02T07:47:55.657969020Z" level=error msg="Failed to destroy network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.658414 env[1201]: time="2024-07-02T07:47:55.658371769Z" level=error msg="encountered an error cleaning up failed sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.658484 env[1201]: time="2024-07-02T07:47:55.658441221Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85d87685d8-466ls,Uid:9157f811-aa2f-4b5b-9f96-f953e6ffd3df,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.658565 env[1201]: time="2024-07-02T07:47:55.658469530Z" level=error msg="Failed to destroy network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.658729 kubelet[2038]: E0702 07:47:55.658695 2038 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.658876 kubelet[2038]: E0702 07:47:55.658752 2038 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85d87685d8-466ls" Jul 2 07:47:55.658876 kubelet[2038]: E0702 07:47:55.658774 2038 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-85d87685d8-466ls" Jul 2 07:47:55.658876 kubelet[2038]: E0702 07:47:55.658828 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-85d87685d8-466ls_calico-system(9157f811-aa2f-4b5b-9f96-f953e6ffd3df)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-85d87685d8-466ls_calico-system(9157f811-aa2f-4b5b-9f96-f953e6ffd3df)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85d87685d8-466ls" podUID="9157f811-aa2f-4b5b-9f96-f953e6ffd3df" Jul 2 07:47:55.659025 env[1201]: time="2024-07-02T07:47:55.658906269Z" level=error msg="encountered an error cleaning up failed sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.659025 env[1201]: time="2024-07-02T07:47:55.658960982Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-js22z,Uid:edef516b-fcf8-4723-908e-6259a8a37eff,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.659155 kubelet[2038]: E0702 07:47:55.659142 2038 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.659211 kubelet[2038]: E0702 07:47:55.659168 2038 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-js22z" Jul 2 07:47:55.659211 kubelet[2038]: E0702 07:47:55.659184 2038 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-js22z" Jul 2 07:47:55.659282 kubelet[2038]: E0702 07:47:55.659237 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-js22z_kube-system(edef516b-fcf8-4723-908e-6259a8a37eff)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-js22z_kube-system(edef516b-fcf8-4723-908e-6259a8a37eff)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-js22z" podUID="edef516b-fcf8-4723-908e-6259a8a37eff" Jul 2 07:47:55.740521 systemd[1]: Created slice kubepods-besteffort-podaeba58ac_e31b_4e0c_ab3d_2ea2da5f68ae.slice. Jul 2 07:47:55.742639 env[1201]: time="2024-07-02T07:47:55.742598551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-75nhn,Uid:aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae,Namespace:calico-system,Attempt:0,}" Jul 2 07:47:55.794295 env[1201]: time="2024-07-02T07:47:55.794169253Z" level=error msg="Failed to destroy network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.794576 env[1201]: time="2024-07-02T07:47:55.794542061Z" level=error msg="encountered an error cleaning up failed sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.794627 env[1201]: time="2024-07-02T07:47:55.794597956Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-75nhn,Uid:aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.794859 kubelet[2038]: E0702 07:47:55.794840 2038 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:55.794935 kubelet[2038]: E0702 07:47:55.794896 2038 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:55.794935 kubelet[2038]: E0702 07:47:55.794926 2038 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-75nhn" Jul 2 07:47:55.794994 kubelet[2038]: E0702 07:47:55.794987 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-75nhn_calico-system(aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-75nhn_calico-system(aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:56.123695 kubelet[2038]: I0702 07:47:56.123357 2038 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:47:56.124049 env[1201]: time="2024-07-02T07:47:56.123974488Z" level=info msg="StopPodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\"" Jul 2 07:47:56.124198 kubelet[2038]: I0702 07:47:56.124065 2038 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:47:56.124425 env[1201]: time="2024-07-02T07:47:56.124395322Z" level=info msg="StopPodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\"" Jul 2 07:47:56.125709 kubelet[2038]: I0702 07:47:56.125686 2038 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:47:56.126466 env[1201]: time="2024-07-02T07:47:56.126079680Z" level=info msg="StopPodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\"" Jul 2 07:47:56.127694 kubelet[2038]: I0702 07:47:56.127674 2038 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:47:56.128011 env[1201]: time="2024-07-02T07:47:56.127990665Z" level=info msg="StopPodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\"" Jul 2 07:47:56.154729 env[1201]: time="2024-07-02T07:47:56.154666945Z" level=error msg="StopPodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" failed" error="failed to destroy network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:56.154889 env[1201]: time="2024-07-02T07:47:56.154668808Z" level=error msg="StopPodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" failed" error="failed to destroy network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:56.155001 kubelet[2038]: E0702 07:47:56.154959 2038 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:47:56.155088 kubelet[2038]: E0702 07:47:56.155068 2038 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834"} Jul 2 07:47:56.155136 kubelet[2038]: E0702 07:47:56.155127 2038 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"edef516b-fcf8-4723-908e-6259a8a37eff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:47:56.155201 kubelet[2038]: E0702 07:47:56.155159 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"edef516b-fcf8-4723-908e-6259a8a37eff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-js22z" podUID="edef516b-fcf8-4723-908e-6259a8a37eff" Jul 2 07:47:56.155336 kubelet[2038]: E0702 07:47:56.155288 2038 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:47:56.155391 kubelet[2038]: E0702 07:47:56.155339 2038 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e"} Jul 2 07:47:56.155391 kubelet[2038]: E0702 07:47:56.155369 2038 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9157f811-aa2f-4b5b-9f96-f953e6ffd3df\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:47:56.155468 kubelet[2038]: E0702 07:47:56.155406 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9157f811-aa2f-4b5b-9f96-f953e6ffd3df\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-85d87685d8-466ls" podUID="9157f811-aa2f-4b5b-9f96-f953e6ffd3df" Jul 2 07:47:56.155514 env[1201]: time="2024-07-02T07:47:56.155396813Z" level=error msg="StopPodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" failed" error="failed to destroy network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:56.155558 kubelet[2038]: E0702 07:47:56.155541 2038 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:47:56.155617 kubelet[2038]: E0702 07:47:56.155573 2038 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950"} Jul 2 07:47:56.155617 kubelet[2038]: E0702 07:47:56.155603 2038 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:47:56.155693 kubelet[2038]: E0702 07:47:56.155631 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-mcrtl" podUID="a1e65ea0-0b20-4bca-bd1c-8dceff6f519a" Jul 2 07:47:56.168296 env[1201]: time="2024-07-02T07:47:56.168251099Z" level=error msg="StopPodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" failed" error="failed to destroy network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 2 07:47:56.168434 kubelet[2038]: E0702 07:47:56.168418 2038 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:47:56.168511 kubelet[2038]: E0702 07:47:56.168445 2038 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2"} Jul 2 07:47:56.168541 kubelet[2038]: E0702 07:47:56.168529 2038 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 2 07:47:56.168599 kubelet[2038]: E0702 07:47:56.168553 2038 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-75nhn" podUID="aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae" Jul 2 07:47:56.310418 systemd[1]: Started sshd@8-10.0.0.78:22-10.0.0.1:38622.service. Jul 2 07:47:56.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.78:22-10.0.0.1:38622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:56.311447 kernel: kauditd_printk_skb: 45 callbacks suppressed Jul 2 07:47:56.311499 kernel: audit: type=1130 audit(1719906476.309:991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.78:22-10.0.0.1:38622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:56.352000 audit[3003]: USER_ACCT pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.354093 sshd[3003]: Accepted publickey for core from 10.0.0.1 port 38622 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:47:56.356774 sshd[3003]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:47:56.355000 audit[3003]: CRED_ACQ pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.360655 systemd-logind[1186]: New session 9 of user core. Jul 2 07:47:56.361424 systemd[1]: Started session-9.scope. Jul 2 07:47:56.362295 kernel: audit: type=1101 audit(1719906476.352:992): pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.362394 kernel: audit: type=1103 audit(1719906476.355:993): pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.362415 kernel: audit: type=1006 audit(1719906476.355:994): pid=3003 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 2 07:47:56.364747 kernel: audit: type=1300 audit(1719906476.355:994): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddd9f6ee0 a2=3 a3=0 items=0 ppid=1 pid=3003 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:56.355000 audit[3003]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddd9f6ee0 a2=3 a3=0 items=0 ppid=1 pid=3003 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:56.369138 kernel: audit: type=1327 audit(1719906476.355:994): proctitle=737368643A20636F7265205B707269765D Jul 2 07:47:56.355000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:47:56.364000 audit[3003]: USER_START pid=3003 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.375237 kernel: audit: type=1105 audit(1719906476.364:995): pid=3003 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.375280 kernel: audit: type=1103 audit(1719906476.365:996): pid=3005 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.365000 audit[3005]: CRED_ACQ pid=3005 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.469358 sshd[3003]: pam_unix(sshd:session): session closed for user core Jul 2 07:47:56.469000 audit[3003]: USER_END pid=3003 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.472306 systemd[1]: sshd@8-10.0.0.78:22-10.0.0.1:38622.service: Deactivated successfully. Jul 2 07:47:56.469000 audit[3003]: CRED_DISP pid=3003 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.473036 systemd[1]: session-9.scope: Deactivated successfully. Jul 2 07:47:56.478595 systemd-logind[1186]: Session 9 logged out. Waiting for processes to exit. Jul 2 07:47:56.478829 kernel: audit: type=1106 audit(1719906476.469:997): pid=3003 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.478875 kernel: audit: type=1104 audit(1719906476.469:998): pid=3003 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:47:56.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.78:22-10.0.0.1:38622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:47:56.480657 systemd-logind[1186]: Removed session 9. Jul 2 07:47:56.588852 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e-shm.mount: Deactivated successfully. Jul 2 07:47:56.588937 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834-shm.mount: Deactivated successfully. Jul 2 07:47:57.078763 kubelet[2038]: I0702 07:47:57.078722 2038 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 2 07:47:57.079498 kubelet[2038]: E0702 07:47:57.079466 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:47:57.095000 audit[3017]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:57.095000 audit[3017]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7fff0afd48f0 a2=0 a3=7fff0afd48dc items=0 ppid=2236 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:57.095000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:57.095000 audit[3017]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:47:57.095000 audit[3017]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff0afd48f0 a2=0 a3=7fff0afd48dc items=0 ppid=2236 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:47:57.095000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:47:57.129652 kubelet[2038]: E0702 07:47:57.129626 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:01.478830 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 2 07:48:01.478941 kernel: audit: type=1130 audit(1719906481.473:1002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.78:22-10.0.0.1:38632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.78:22-10.0.0.1:38632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.473981 systemd[1]: Started sshd@9-10.0.0.78:22-10.0.0.1:38632.service. Jul 2 07:48:01.547353 kernel: audit: type=1101 audit(1719906481.534:1003): pid=3019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.547463 kernel: audit: type=1103 audit(1719906481.538:1004): pid=3019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.547483 kernel: audit: type=1006 audit(1719906481.538:1005): pid=3019 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 2 07:48:01.534000 audit[3019]: USER_ACCT pid=3019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.538000 audit[3019]: CRED_ACQ pid=3019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.547682 sshd[3019]: Accepted publickey for core from 10.0.0.1 port 38632 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:01.539290 sshd[3019]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:01.543668 systemd[1]: Started session-10.scope. Jul 2 07:48:01.545008 systemd-logind[1186]: New session 10 of user core. Jul 2 07:48:01.538000 audit[3019]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcdf86c50 a2=3 a3=0 items=0 ppid=1 pid=3019 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:01.555031 kernel: audit: type=1300 audit(1719906481.538:1005): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcdf86c50 a2=3 a3=0 items=0 ppid=1 pid=3019 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:01.555077 kernel: audit: type=1327 audit(1719906481.538:1005): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:01.555095 kernel: audit: type=1105 audit(1719906481.551:1006): pid=3019 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.538000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:01.551000 audit[3019]: USER_START pid=3019 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.555000 audit[3021]: CRED_ACQ pid=3021 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.562779 kernel: audit: type=1103 audit(1719906481.555:1007): pid=3021 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.807056 sshd[3019]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:01.811017 systemd[1]: Started sshd@10-10.0.0.78:22-10.0.0.1:38638.service. Jul 2 07:48:01.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.78:22-10.0.0.1:38638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.823623 kernel: audit: type=1130 audit(1719906481.810:1008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.78:22-10.0.0.1:38638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.823674 kernel: audit: type=1106 audit(1719906481.817:1009): pid=3019 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.817000 audit[3019]: USER_END pid=3019 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.819226 systemd[1]: sshd@9-10.0.0.78:22-10.0.0.1:38632.service: Deactivated successfully. Jul 2 07:48:01.819778 systemd[1]: session-10.scope: Deactivated successfully. Jul 2 07:48:01.823905 systemd-logind[1186]: Session 10 logged out. Waiting for processes to exit. Jul 2 07:48:01.817000 audit[3019]: CRED_DISP pid=3019 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.78:22-10.0.0.1:38632 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.824809 systemd-logind[1186]: Removed session 10. Jul 2 07:48:01.846000 audit[3032]: USER_ACCT pid=3032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.846727 sshd[3032]: Accepted publickey for core from 10.0.0.1 port 38638 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:01.847000 audit[3032]: CRED_ACQ pid=3032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.847000 audit[3032]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd91866460 a2=3 a3=0 items=0 ppid=1 pid=3032 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:01.847000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:01.848230 sshd[3032]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:01.851532 systemd-logind[1186]: New session 11 of user core. Jul 2 07:48:01.852254 systemd[1]: Started session-11.scope. Jul 2 07:48:01.855000 audit[3032]: USER_START pid=3032 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.857000 audit[3035]: CRED_ACQ pid=3035 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.993362 sshd[3032]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:01.994000 audit[3032]: USER_END pid=3032 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.994000 audit[3032]: CRED_DISP pid=3032 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:01.996547 systemd[1]: Started sshd@11-10.0.0.78:22-10.0.0.1:38648.service. Jul 2 07:48:01.996964 systemd[1]: sshd@10-10.0.0.78:22-10.0.0.1:38638.service: Deactivated successfully. Jul 2 07:48:01.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.78:22-10.0.0.1:38648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.78:22-10.0.0.1:38638 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:01.997573 systemd[1]: session-11.scope: Deactivated successfully. Jul 2 07:48:01.998377 systemd-logind[1186]: Session 11 logged out. Waiting for processes to exit. Jul 2 07:48:01.999565 systemd-logind[1186]: Removed session 11. Jul 2 07:48:02.035000 audit[3045]: USER_ACCT pid=3045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:02.036000 audit[3045]: CRED_ACQ pid=3045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:02.036000 audit[3045]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc24045ba0 a2=3 a3=0 items=0 ppid=1 pid=3045 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:02.036000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:02.042037 sshd[3045]: Accepted publickey for core from 10.0.0.1 port 38648 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:02.037511 sshd[3045]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:02.049347 systemd[1]: Started session-12.scope. Jul 2 07:48:02.051296 systemd-logind[1186]: New session 12 of user core. Jul 2 07:48:02.055000 audit[3045]: USER_START pid=3045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:02.056000 audit[3048]: CRED_ACQ pid=3048 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:02.157777 sshd[3045]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:02.157000 audit[3045]: USER_END pid=3045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:02.157000 audit[3045]: CRED_DISP pid=3045 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:02.160269 systemd[1]: sshd@11-10.0.0.78:22-10.0.0.1:38648.service: Deactivated successfully. Jul 2 07:48:02.160945 systemd[1]: session-12.scope: Deactivated successfully. Jul 2 07:48:02.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.78:22-10.0.0.1:38648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:02.161494 systemd-logind[1186]: Session 12 logged out. Waiting for processes to exit. Jul 2 07:48:02.162236 systemd-logind[1186]: Removed session 12. Jul 2 07:48:03.217069 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2481482968.mount: Deactivated successfully. Jul 2 07:48:03.928483 env[1201]: time="2024-07-02T07:48:03.928429436Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:03.930904 env[1201]: time="2024-07-02T07:48:03.930875672Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:03.932740 env[1201]: time="2024-07-02T07:48:03.932699525Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:03.934400 env[1201]: time="2024-07-02T07:48:03.934373513Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:95f8004836427050c9997ad0800819ced5636f6bda647b4158fc7c497910c8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:03.937428 env[1201]: time="2024-07-02T07:48:03.937382421Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.28.0\" returns image reference \"sha256:4e42b6f329bc1d197d97f6d2a1289b9e9f4a9560db3a36c8cffb5e95e64e4b49\"" Jul 2 07:48:03.947016 env[1201]: time="2024-07-02T07:48:03.946978121Z" level=info msg="CreateContainer within sandbox \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 2 07:48:03.964040 env[1201]: time="2024-07-02T07:48:03.963987591Z" level=info msg="CreateContainer within sandbox \"0e33596db7a03f4cb20036ab857ffe00fa929853571a79941644301e0b1bb44c\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"1e538cb38688a963a6fe5003517f3209c33282cb5a0856f2322a84e943030573\"" Jul 2 07:48:03.965400 env[1201]: time="2024-07-02T07:48:03.965369337Z" level=info msg="StartContainer for \"1e538cb38688a963a6fe5003517f3209c33282cb5a0856f2322a84e943030573\"" Jul 2 07:48:03.979014 systemd[1]: Started cri-containerd-1e538cb38688a963a6fe5003517f3209c33282cb5a0856f2322a84e943030573.scope. Jul 2 07:48:03.993000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.993000 audit[3067]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f57643ba618 items=0 ppid=2488 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353338636233383638386139363361366665353030333531376633 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit: BPF prog-id=139 op=LOAD Jul 2 07:48:03.994000 audit[3067]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00037e068 items=0 ppid=2488 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353338636233383638386139363361366665353030333531376633 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit: BPF prog-id=140 op=LOAD Jul 2 07:48:03.994000 audit[3067]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00037e0b8 items=0 ppid=2488 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353338636233383638386139363361366665353030333531376633 Jul 2 07:48:03.994000 audit: BPF prog-id=140 op=UNLOAD Jul 2 07:48:03.994000 audit: BPF prog-id=139 op=UNLOAD Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { perfmon } for pid=3067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit[3067]: AVC avc: denied { bpf } for pid=3067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:03.994000 audit: BPF prog-id=141 op=LOAD Jul 2 07:48:03.994000 audit[3067]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00037e148 items=0 ppid=2488 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:03.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353338636233383638386139363361366665353030333531376633 Jul 2 07:48:04.471892 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 2 07:48:04.472060 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 2 07:48:04.575574 env[1201]: time="2024-07-02T07:48:04.575521874Z" level=info msg="StartContainer for \"1e538cb38688a963a6fe5003517f3209c33282cb5a0856f2322a84e943030573\" returns successfully" Jul 2 07:48:05.581734 kubelet[2038]: E0702 07:48:05.581695 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:06.125000 audit[3200]: AVC avc: denied { write } for pid=3200 comm="tee" name="fd" dev="proc" ino=25119 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.125000 audit[3200]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6be57a2e a2=241 a3=1b6 items=1 ppid=3163 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.125000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 2 07:48:06.125000 audit: PATH item=0 name="/dev/fd/63" inode=24216 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.125000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.136000 audit[3223]: AVC avc: denied { write } for pid=3223 comm="tee" name="fd" dev="proc" ino=23527 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.136000 audit[3223]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd085d4a30 a2=241 a3=1b6 items=1 ppid=3162 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.136000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 2 07:48:06.136000 audit: PATH item=0 name="/dev/fd/63" inode=24224 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.136000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.139000 audit[3219]: AVC avc: denied { write } for pid=3219 comm="tee" name="fd" dev="proc" ino=23531 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.139000 audit[3219]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd96160a2f a2=241 a3=1b6 items=1 ppid=3161 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.139000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 2 07:48:06.139000 audit: PATH item=0 name="/dev/fd/63" inode=24221 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.139000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.145000 audit[3229]: AVC avc: denied { write } for pid=3229 comm="tee" name="fd" dev="proc" ino=25611 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.145000 audit[3229]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe55947a1e a2=241 a3=1b6 items=1 ppid=3171 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.145000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 2 07:48:06.145000 audit: PATH item=0 name="/dev/fd/63" inode=25123 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.145000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.151000 audit[3225]: AVC avc: denied { write } for pid=3225 comm="tee" name="fd" dev="proc" ino=24227 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.151000 audit[3225]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebd1daa2e a2=241 a3=1b6 items=1 ppid=3167 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.151000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 2 07:48:06.151000 audit: PATH item=0 name="/dev/fd/63" inode=23524 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.151000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.154000 audit[3236]: AVC avc: denied { write } for pid=3236 comm="tee" name="fd" dev="proc" ino=25618 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.154000 audit[3236]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffffb489a1f a2=241 a3=1b6 items=1 ppid=3170 pid=3236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.154000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 2 07:48:06.154000 audit: PATH item=0 name="/dev/fd/63" inode=25126 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.154000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.161000 audit[3240]: AVC avc: denied { write } for pid=3240 comm="tee" name="fd" dev="proc" ino=25622 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 2 07:48:06.161000 audit[3240]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffbc7c7a2e a2=241 a3=1b6 items=1 ppid=3169 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.161000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 2 07:48:06.161000 audit: PATH item=0 name="/dev/fd/63" inode=23533 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 2 07:48:06.161000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 2 07:48:06.312441 systemd-networkd[1015]: vxlan.calico: Link UP Jul 2 07:48:06.312449 systemd-networkd[1015]: vxlan.calico: Gained carrier Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit: BPF prog-id=142 op=LOAD Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffca73e9f00 a2=70 a3=7f05f766a000 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.317000 audit: BPF prog-id=142 op=UNLOAD Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit: BPF prog-id=143 op=LOAD Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffca73e9f00 a2=70 a3=6f items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.317000 audit: BPF prog-id=143 op=UNLOAD Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffca73e9eb0 a2=70 a3=7ffca73e9f00 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit: BPF prog-id=144 op=LOAD Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffca73e9e90 a2=70 a3=7ffca73e9f00 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.317000 audit: BPF prog-id=144 op=UNLOAD Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca73e9f70 a2=70 a3=0 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca73e9f60 a2=70 a3=0 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.317000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.317000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffca73e9ed0 a2=70 a3=0 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.317000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffca73e9fa0 a2=70 a3=ae68b0 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.318000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffca73e9fa0 a2=70 a3=ae3880 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.318000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { perfmon } for pid=3311 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit[3311]: AVC avc: denied { bpf } for pid=3311 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.318000 audit: BPF prog-id=145 op=LOAD Jul 2 07:48:06.318000 audit[3311]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffca73e9ec0 a2=70 a3=0 items=0 ppid=3166 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.318000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 2 07:48:06.320000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.320000 audit[3314]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe616690c0 a2=70 a3=208 items=0 ppid=3166 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.320000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:48:06.320000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:06.320000 audit[3314]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe61668f90 a2=70 a3=3 items=0 ppid=3166 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.320000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 2 07:48:06.325000 audit: BPF prog-id=145 op=UNLOAD Jul 2 07:48:06.368000 audit[3343]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=3343 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:06.368000 audit[3343]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffdc4e76430 a2=0 a3=7ffdc4e7641c items=0 ppid=3166 pid=3343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.368000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:06.372000 audit[3342]: NETFILTER_CFG table=nat:98 family=2 entries=15 op=nft_register_chain pid=3342 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:06.372000 audit[3342]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd12011970 a2=0 a3=7ffd1201195c items=0 ppid=3166 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.372000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:06.374000 audit[3344]: NETFILTER_CFG table=raw:99 family=2 entries=19 op=nft_register_chain pid=3344 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:06.374000 audit[3344]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7fffd5810b30 a2=0 a3=7fffd5810b1c items=0 ppid=3166 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.374000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:06.375000 audit[3346]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3346 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:06.375000 audit[3346]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffdef069bc0 a2=0 a3=7ffdef069bac items=0 ppid=3166 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:06.375000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:06.583069 kubelet[2038]: E0702 07:48:06.583035 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:07.161948 systemd[1]: Started sshd@12-10.0.0.78:22-10.0.0.1:52750.service. Jul 2 07:48:07.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.78:22-10.0.0.1:52750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:07.163167 kernel: kauditd_printk_skb: 190 callbacks suppressed Jul 2 07:48:07.163292 kernel: audit: type=1130 audit(1719906487.161:1062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.78:22-10.0.0.1:52750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:07.198000 audit[3376]: USER_ACCT pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.199102 sshd[3376]: Accepted publickey for core from 10.0.0.1 port 52750 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:07.201846 sshd[3376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:07.201000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.205284 systemd-logind[1186]: New session 13 of user core. Jul 2 07:48:07.206015 systemd[1]: Started session-13.scope. Jul 2 07:48:07.206533 kernel: audit: type=1101 audit(1719906487.198:1063): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.206592 kernel: audit: type=1103 audit(1719906487.201:1064): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.206614 kernel: audit: type=1006 audit(1719906487.201:1065): pid=3376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 2 07:48:07.201000 audit[3376]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3b527f00 a2=3 a3=0 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.212856 kernel: audit: type=1300 audit(1719906487.201:1065): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3b527f00 a2=3 a3=0 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:07.212908 kernel: audit: type=1327 audit(1719906487.201:1065): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:07.201000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:07.214173 kernel: audit: type=1105 audit(1719906487.209:1066): pid=3376 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.209000 audit[3376]: USER_START pid=3376 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.218336 kernel: audit: type=1103 audit(1719906487.210:1067): pid=3378 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.210000 audit[3378]: CRED_ACQ pid=3378 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.307402 sshd[3376]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:07.307000 audit[3376]: USER_END pid=3376 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.309679 systemd[1]: sshd@12-10.0.0.78:22-10.0.0.1:52750.service: Deactivated successfully. Jul 2 07:48:07.310363 systemd[1]: session-13.scope: Deactivated successfully. Jul 2 07:48:07.310774 systemd-logind[1186]: Session 13 logged out. Waiting for processes to exit. Jul 2 07:48:07.311444 systemd-logind[1186]: Removed session 13. Jul 2 07:48:07.307000 audit[3376]: CRED_DISP pid=3376 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.316024 kernel: audit: type=1106 audit(1719906487.307:1068): pid=3376 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.316063 kernel: audit: type=1104 audit(1719906487.307:1069): pid=3376 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:07.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.78:22-10.0.0.1:52750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:07.735195 env[1201]: time="2024-07-02T07:48:07.735149913Z" level=info msg="StopPodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\"" Jul 2 07:48:07.778243 kubelet[2038]: I0702 07:48:07.778209 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-b2h75" podStartSLOduration=6.102748178 podStartE2EDuration="26.778169293s" podCreationTimestamp="2024-07-02 07:47:41 +0000 UTC" firstStartedPulling="2024-07-02 07:47:43.262142334 +0000 UTC m=+22.636445405" lastFinishedPulling="2024-07-02 07:48:03.937563449 +0000 UTC m=+43.311866520" observedRunningTime="2024-07-02 07:48:05.600104781 +0000 UTC m=+44.974407852" watchObservedRunningTime="2024-07-02 07:48:07.778169293 +0000 UTC m=+47.152472364" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.776 [INFO][3405] k8s.go 608: Cleaning up netns ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.776 [INFO][3405] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" iface="eth0" netns="/var/run/netns/cni-55c2affa-5772-4388-9969-0a05021c8012" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.777 [INFO][3405] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" iface="eth0" netns="/var/run/netns/cni-55c2affa-5772-4388-9969-0a05021c8012" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.777 [INFO][3405] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" iface="eth0" netns="/var/run/netns/cni-55c2affa-5772-4388-9969-0a05021c8012" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.777 [INFO][3405] k8s.go 615: Releasing IP address(es) ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.777 [INFO][3405] utils.go 188: Calico CNI releasing IP address ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.820 [INFO][3412] ipam_plugin.go 411: Releasing address using handleID ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.820 [INFO][3412] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.820 [INFO][3412] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.826 [WARNING][3412] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.826 [INFO][3412] ipam_plugin.go 439: Releasing address using workloadID ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.828 [INFO][3412] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:07.830925 env[1201]: 2024-07-02 07:48:07.829 [INFO][3405] k8s.go 621: Teardown processing complete. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:07.831470 env[1201]: time="2024-07-02T07:48:07.831053969Z" level=info msg="TearDown network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" successfully" Jul 2 07:48:07.831470 env[1201]: time="2024-07-02T07:48:07.831085673Z" level=info msg="StopPodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" returns successfully" Jul 2 07:48:07.833022 systemd[1]: run-netns-cni\x2d55c2affa\x2d5772\x2d4388\x2d9969\x2d0a05021c8012.mount: Deactivated successfully. Jul 2 07:48:07.833875 kubelet[2038]: E0702 07:48:07.833846 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:07.834283 env[1201]: time="2024-07-02T07:48:07.834225528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-js22z,Uid:edef516b-fcf8-4723-908e-6259a8a37eff,Namespace:kube-system,Attempt:1,}" Jul 2 07:48:07.925455 systemd-networkd[1015]: vxlan.calico: Gained IPv6LL Jul 2 07:48:08.074973 systemd-networkd[1015]: cali332fb74295f: Link UP Jul 2 07:48:08.076366 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:48:08.076408 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali332fb74295f: link becomes ready Jul 2 07:48:08.076524 systemd-networkd[1015]: cali332fb74295f: Gained carrier Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.019 [INFO][3419] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--76f75df574--js22z-eth0 coredns-76f75df574- kube-system edef516b-fcf8-4723-908e-6259a8a37eff 852 0 2024-07-02 07:47:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-76f75df574-js22z eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali332fb74295f [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.019 [INFO][3419] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.045 [INFO][3432] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" HandleID="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.052 [INFO][3432] ipam_plugin.go 264: Auto assigning IP ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" HandleID="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00029b670), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-76f75df574-js22z", "timestamp":"2024-07-02 07:48:08.045430627 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.052 [INFO][3432] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.052 [INFO][3432] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.052 [INFO][3432] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.053 [INFO][3432] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.056 [INFO][3432] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.059 [INFO][3432] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.061 [INFO][3432] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.062 [INFO][3432] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.062 [INFO][3432] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.063 [INFO][3432] ipam.go 1685: Creating new handle: k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09 Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.066 [INFO][3432] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.070 [INFO][3432] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.070 [INFO][3432] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" host="localhost" Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.070 [INFO][3432] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:08.088415 env[1201]: 2024-07-02 07:48:08.070 [INFO][3432] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" HandleID="k8s-pod-network.1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.089038 env[1201]: 2024-07-02 07:48:08.072 [INFO][3419] k8s.go 386: Populated endpoint ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--js22z-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"edef516b-fcf8-4723-908e-6259a8a37eff", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-76f75df574-js22z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali332fb74295f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:08.089038 env[1201]: 2024-07-02 07:48:08.072 [INFO][3419] k8s.go 387: Calico CNI using IPs: [192.168.88.129/32] ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.089038 env[1201]: 2024-07-02 07:48:08.072 [INFO][3419] dataplane_linux.go 68: Setting the host side veth name to cali332fb74295f ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.089038 env[1201]: 2024-07-02 07:48:08.077 [INFO][3419] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.089038 env[1201]: 2024-07-02 07:48:08.077 [INFO][3419] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--js22z-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"edef516b-fcf8-4723-908e-6259a8a37eff", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09", Pod:"coredns-76f75df574-js22z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali332fb74295f", MAC:"ae:1e:4d:61:d5:b3", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:08.089038 env[1201]: 2024-07-02 07:48:08.086 [INFO][3419] k8s.go 500: Wrote updated endpoint to datastore ContainerID="1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09" Namespace="kube-system" Pod="coredns-76f75df574-js22z" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:08.094000 audit[3450]: NETFILTER_CFG table=filter:101 family=2 entries=34 op=nft_register_chain pid=3450 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:08.094000 audit[3450]: SYSCALL arch=c000003e syscall=46 success=yes exit=19148 a0=3 a1=7ffea698e4c0 a2=0 a3=7ffea698e4ac items=0 ppid=3166 pid=3450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.094000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:08.103558 env[1201]: time="2024-07-02T07:48:08.103489944Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:08.103558 env[1201]: time="2024-07-02T07:48:08.103526097Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:08.103558 env[1201]: time="2024-07-02T07:48:08.103536047Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:08.103737 env[1201]: time="2024-07-02T07:48:08.103672031Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09 pid=3463 runtime=io.containerd.runc.v2 Jul 2 07:48:08.120573 systemd[1]: Started cri-containerd-1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09.scope. Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit: BPF prog-id=146 op=LOAD Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3463 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343466336565306530333363353562336437373137373964313031 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3463 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343466336565306530333363353562336437373137373964313031 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit: BPF prog-id=147 op=LOAD Jul 2 07:48:08.129000 audit[3474]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000218ab0 items=0 ppid=3463 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343466336565306530333363353562336437373137373964313031 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.129000 audit: BPF prog-id=148 op=LOAD Jul 2 07:48:08.129000 audit[3474]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000218af8 items=0 ppid=3463 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.129000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343466336565306530333363353562336437373137373964313031 Jul 2 07:48:08.130000 audit: BPF prog-id=148 op=UNLOAD Jul 2 07:48:08.130000 audit: BPF prog-id=147 op=UNLOAD Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.130000 audit: BPF prog-id=149 op=LOAD Jul 2 07:48:08.130000 audit[3474]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000218f08 items=0 ppid=3463 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343466336565306530333363353562336437373137373964313031 Jul 2 07:48:08.130977 systemd-resolved[1136]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:48:08.151878 env[1201]: time="2024-07-02T07:48:08.151837957Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-js22z,Uid:edef516b-fcf8-4723-908e-6259a8a37eff,Namespace:kube-system,Attempt:1,} returns sandbox id \"1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09\"" Jul 2 07:48:08.152517 kubelet[2038]: E0702 07:48:08.152492 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:08.154161 env[1201]: time="2024-07-02T07:48:08.154135775Z" level=info msg="CreateContainer within sandbox \"1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:48:08.169021 env[1201]: time="2024-07-02T07:48:08.168959962Z" level=info msg="CreateContainer within sandbox \"1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6dbe88ee10d3ca21e745bf4504d3eaa022799c9e93d1cf279653c3514be4cc55\"" Jul 2 07:48:08.170522 env[1201]: time="2024-07-02T07:48:08.170495040Z" level=info msg="StartContainer for \"6dbe88ee10d3ca21e745bf4504d3eaa022799c9e93d1cf279653c3514be4cc55\"" Jul 2 07:48:08.183288 systemd[1]: Started cri-containerd-6dbe88ee10d3ca21e745bf4504d3eaa022799c9e93d1cf279653c3514be4cc55.scope. Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.199000 audit: BPF prog-id=150 op=LOAD Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3463 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664626538386565313064336361323165373435626634353034643365 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3463 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664626538386565313064336361323165373435626634353034643365 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit: BPF prog-id=151 op=LOAD Jul 2 07:48:08.200000 audit[3508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c6910 items=0 ppid=3463 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664626538386565313064336361323165373435626634353034643365 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit: BPF prog-id=152 op=LOAD Jul 2 07:48:08.200000 audit[3508]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c6958 items=0 ppid=3463 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664626538386565313064336361323165373435626634353034643365 Jul 2 07:48:08.200000 audit: BPF prog-id=152 op=UNLOAD Jul 2 07:48:08.200000 audit: BPF prog-id=151 op=UNLOAD Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { perfmon } for pid=3508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit[3508]: AVC avc: denied { bpf } for pid=3508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:08.200000 audit: BPF prog-id=153 op=LOAD Jul 2 07:48:08.200000 audit[3508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c6d68 items=0 ppid=3463 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664626538386565313064336361323165373435626634353034643365 Jul 2 07:48:08.211420 env[1201]: time="2024-07-02T07:48:08.211377341Z" level=info msg="StartContainer for \"6dbe88ee10d3ca21e745bf4504d3eaa022799c9e93d1cf279653c3514be4cc55\" returns successfully" Jul 2 07:48:08.587719 kubelet[2038]: E0702 07:48:08.587695 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:08.630000 audit[3540]: NETFILTER_CFG table=filter:102 family=2 entries=14 op=nft_register_rule pid=3540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:08.630000 audit[3540]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffca2bddcf0 a2=0 a3=7ffca2bddcdc items=0 ppid=2236 pid=3540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:08.630000 audit[3540]: NETFILTER_CFG table=nat:103 family=2 entries=14 op=nft_register_rule pid=3540 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:08.630000 audit[3540]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffca2bddcf0 a2=0 a3=0 items=0 ppid=2236 pid=3540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:08.641161 kubelet[2038]: I0702 07:48:08.641132 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-js22z" podStartSLOduration=33.641091376 podStartE2EDuration="33.641091376s" podCreationTimestamp="2024-07-02 07:47:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:48:08.598350713 +0000 UTC m=+47.972653804" watchObservedRunningTime="2024-07-02 07:48:08.641091376 +0000 UTC m=+48.015394447" Jul 2 07:48:08.775000 audit[3542]: NETFILTER_CFG table=filter:104 family=2 entries=11 op=nft_register_rule pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:08.775000 audit[3542]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe8d52a770 a2=0 a3=7ffe8d52a75c items=0 ppid=2236 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.775000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:08.776000 audit[3542]: NETFILTER_CFG table=nat:105 family=2 entries=35 op=nft_register_chain pid=3542 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:08.776000 audit[3542]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe8d52a770 a2=0 a3=7ffe8d52a75c items=0 ppid=2236 pid=3542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:08.776000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:09.589610 kubelet[2038]: E0702 07:48:09.589571 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:09.735880 env[1201]: time="2024-07-02T07:48:09.735840523Z" level=info msg="StopPodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\"" Jul 2 07:48:09.736440 env[1201]: time="2024-07-02T07:48:09.735840473Z" level=info msg="StopPodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\"" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.785 [INFO][3580] k8s.go 608: Cleaning up netns ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.786 [INFO][3580] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" iface="eth0" netns="/var/run/netns/cni-84893ff3-5494-3c94-8b67-489028d78de8" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.786 [INFO][3580] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" iface="eth0" netns="/var/run/netns/cni-84893ff3-5494-3c94-8b67-489028d78de8" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.786 [INFO][3580] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" iface="eth0" netns="/var/run/netns/cni-84893ff3-5494-3c94-8b67-489028d78de8" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.786 [INFO][3580] k8s.go 615: Releasing IP address(es) ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.786 [INFO][3580] utils.go 188: Calico CNI releasing IP address ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.809 [INFO][3604] ipam_plugin.go 411: Releasing address using handleID ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.810 [INFO][3604] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.810 [INFO][3604] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.860 [WARNING][3604] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.860 [INFO][3604] ipam_plugin.go 439: Releasing address using workloadID ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.861 [INFO][3604] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:09.863971 env[1201]: 2024-07-02 07:48:09.862 [INFO][3580] k8s.go 621: Teardown processing complete. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:09.864560 env[1201]: time="2024-07-02T07:48:09.864051660Z" level=info msg="TearDown network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" successfully" Jul 2 07:48:09.864560 env[1201]: time="2024-07-02T07:48:09.864088725Z" level=info msg="StopPodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" returns successfully" Jul 2 07:48:09.866014 systemd[1]: run-netns-cni\x2d84893ff3\x2d5494\x2d3c94\x2d8b67\x2d489028d78de8.mount: Deactivated successfully. Jul 2 07:48:09.867772 env[1201]: time="2024-07-02T07:48:09.867701802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-75nhn,Uid:aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae,Namespace:calico-system,Attempt:1,}" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.777 [INFO][3585] k8s.go 608: Cleaning up netns ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.777 [INFO][3585] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" iface="eth0" netns="/var/run/netns/cni-06b684c4-e443-206c-090a-61cf0e13027c" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.777 [INFO][3585] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" iface="eth0" netns="/var/run/netns/cni-06b684c4-e443-206c-090a-61cf0e13027c" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.778 [INFO][3585] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" iface="eth0" netns="/var/run/netns/cni-06b684c4-e443-206c-090a-61cf0e13027c" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.778 [INFO][3585] k8s.go 615: Releasing IP address(es) ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.778 [INFO][3585] utils.go 188: Calico CNI releasing IP address ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.813 [INFO][3598] ipam_plugin.go 411: Releasing address using handleID ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.813 [INFO][3598] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.861 [INFO][3598] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.869 [WARNING][3598] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.869 [INFO][3598] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.871 [INFO][3598] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:09.873776 env[1201]: 2024-07-02 07:48:09.872 [INFO][3585] k8s.go 621: Teardown processing complete. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:09.874117 env[1201]: time="2024-07-02T07:48:09.873890815Z" level=info msg="TearDown network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" successfully" Jul 2 07:48:09.874117 env[1201]: time="2024-07-02T07:48:09.873919913Z" level=info msg="StopPodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" returns successfully" Jul 2 07:48:09.874188 kubelet[2038]: E0702 07:48:09.874156 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:09.875263 env[1201]: time="2024-07-02T07:48:09.874825669Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-mcrtl,Uid:a1e65ea0-0b20-4bca-bd1c-8dceff6f519a,Namespace:kube-system,Attempt:1,}" Jul 2 07:48:09.876147 systemd[1]: run-netns-cni\x2d06b684c4\x2de443\x2d206c\x2d090a\x2d61cf0e13027c.mount: Deactivated successfully. Jul 2 07:48:09.909458 systemd-networkd[1015]: cali332fb74295f: Gained IPv6LL Jul 2 07:48:10.176822 systemd-networkd[1015]: calie643bfa4c9e: Link UP Jul 2 07:48:10.179297 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 2 07:48:10.179803 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie643bfa4c9e: link becomes ready Jul 2 07:48:10.179665 systemd-networkd[1015]: calie643bfa4c9e: Gained carrier Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.123 [INFO][3612] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--75nhn-eth0 csi-node-driver- calico-system aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae 892 0 2024-07-02 07:47:42 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:7d7f6c786c k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-75nhn eth0 default [] [] [kns.calico-system ksa.calico-system.default] calie643bfa4c9e [] []}} ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.123 [INFO][3612] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.147 [INFO][3639] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" HandleID="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.155 [INFO][3639] ipam_plugin.go 264: Auto assigning IP ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" HandleID="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002f6da0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-75nhn", "timestamp":"2024-07-02 07:48:10.14787252 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.155 [INFO][3639] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.155 [INFO][3639] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.155 [INFO][3639] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.156 [INFO][3639] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.160 [INFO][3639] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.163 [INFO][3639] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.164 [INFO][3639] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.166 [INFO][3639] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.166 [INFO][3639] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.166 [INFO][3639] ipam.go 1685: Creating new handle: k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.169 [INFO][3639] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.172 [INFO][3639] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.172 [INFO][3639] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" host="localhost" Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.172 [INFO][3639] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:10.196484 env[1201]: 2024-07-02 07:48:10.172 [INFO][3639] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" HandleID="k8s-pod-network.de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.197085 env[1201]: 2024-07-02 07:48:10.174 [INFO][3612] k8s.go 386: Populated endpoint ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--75nhn-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae", ResourceVersion:"892", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-75nhn", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie643bfa4c9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:10.197085 env[1201]: 2024-07-02 07:48:10.174 [INFO][3612] k8s.go 387: Calico CNI using IPs: [192.168.88.130/32] ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.197085 env[1201]: 2024-07-02 07:48:10.174 [INFO][3612] dataplane_linux.go 68: Setting the host side veth name to calie643bfa4c9e ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.197085 env[1201]: 2024-07-02 07:48:10.179 [INFO][3612] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.197085 env[1201]: 2024-07-02 07:48:10.180 [INFO][3612] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--75nhn-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae", ResourceVersion:"892", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a", Pod:"csi-node-driver-75nhn", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie643bfa4c9e", MAC:"d6:6b:ad:ad:68:99", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:10.197085 env[1201]: 2024-07-02 07:48:10.190 [INFO][3612] k8s.go 500: Wrote updated endpoint to datastore ContainerID="de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a" Namespace="calico-system" Pod="csi-node-driver-75nhn" WorkloadEndpoint="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:10.196000 audit[3659]: NETFILTER_CFG table=filter:106 family=2 entries=38 op=nft_register_chain pid=3659 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:10.196000 audit[3659]: SYSCALL arch=c000003e syscall=46 success=yes exit=20336 a0=3 a1=7ffe47f4a010 a2=0 a3=7ffe47f49ffc items=0 ppid=3166 pid=3659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.196000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:10.204800 systemd-networkd[1015]: caliebe89c14385: Link UP Jul 2 07:48:10.207444 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliebe89c14385: link becomes ready Jul 2 07:48:10.207744 systemd-networkd[1015]: caliebe89c14385: Gained carrier Jul 2 07:48:10.213863 env[1201]: time="2024-07-02T07:48:10.213753029Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:10.213863 env[1201]: time="2024-07-02T07:48:10.213835786Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:10.213863 env[1201]: time="2024-07-02T07:48:10.213851277Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:10.214056 env[1201]: time="2024-07-02T07:48:10.213993103Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a pid=3678 runtime=io.containerd.runc.v2 Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.130 [INFO][3623] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--76f75df574--mcrtl-eth0 coredns-76f75df574- kube-system a1e65ea0-0b20-4bca-bd1c-8dceff6f519a 891 0 2024-07-02 07:47:35 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-76f75df574-mcrtl eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliebe89c14385 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.130 [INFO][3623] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.157 [INFO][3645] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" HandleID="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.163 [INFO][3645] ipam_plugin.go 264: Auto assigning IP ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" HandleID="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000591e10), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-76f75df574-mcrtl", "timestamp":"2024-07-02 07:48:10.15706291 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.164 [INFO][3645] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.172 [INFO][3645] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.172 [INFO][3645] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.174 [INFO][3645] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.177 [INFO][3645] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.181 [INFO][3645] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.182 [INFO][3645] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.184 [INFO][3645] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.184 [INFO][3645] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.185 [INFO][3645] ipam.go 1685: Creating new handle: k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36 Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.190 [INFO][3645] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.197 [INFO][3645] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.198 [INFO][3645] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" host="localhost" Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.198 [INFO][3645] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:10.216864 env[1201]: 2024-07-02 07:48:10.198 [INFO][3645] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" HandleID="k8s-pod-network.01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.217484 env[1201]: 2024-07-02 07:48:10.199 [INFO][3623] k8s.go 386: Populated endpoint ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--mcrtl-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a", ResourceVersion:"891", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-76f75df574-mcrtl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe89c14385", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:10.217484 env[1201]: 2024-07-02 07:48:10.200 [INFO][3623] k8s.go 387: Calico CNI using IPs: [192.168.88.131/32] ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.217484 env[1201]: 2024-07-02 07:48:10.200 [INFO][3623] dataplane_linux.go 68: Setting the host side veth name to caliebe89c14385 ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.217484 env[1201]: 2024-07-02 07:48:10.208 [INFO][3623] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.217484 env[1201]: 2024-07-02 07:48:10.209 [INFO][3623] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--mcrtl-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a", ResourceVersion:"891", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36", Pod:"coredns-76f75df574-mcrtl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe89c14385", MAC:"4e:1c:9f:6b:f5:eb", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:10.217484 env[1201]: 2024-07-02 07:48:10.215 [INFO][3623] k8s.go 500: Wrote updated endpoint to datastore ContainerID="01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36" Namespace="kube-system" Pod="coredns-76f75df574-mcrtl" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:10.224000 audit[3709]: NETFILTER_CFG table=filter:107 family=2 entries=40 op=nft_register_chain pid=3709 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:10.224000 audit[3709]: SYSCALL arch=c000003e syscall=46 success=yes exit=21072 a0=3 a1=7ffeb5f20080 a2=0 a3=7ffeb5f2006c items=0 ppid=3166 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.224000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:10.226993 systemd[1]: Started cri-containerd-de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a.scope. Jul 2 07:48:10.231735 env[1201]: time="2024-07-02T07:48:10.231644333Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:10.231735 env[1201]: time="2024-07-02T07:48:10.231680686Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:10.231735 env[1201]: time="2024-07-02T07:48:10.231690115Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:10.232353 env[1201]: time="2024-07-02T07:48:10.231789936Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36 pid=3717 runtime=io.containerd.runc.v2 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.236000 audit: BPF prog-id=154 op=LOAD Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3678 pid=3687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465326661656235326665396432333534306163336335386364643132 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3678 pid=3687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465326661656235326665396432333534306163336335386364643132 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit: BPF prog-id=155 op=LOAD Jul 2 07:48:10.237000 audit[3687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001df6b0 items=0 ppid=3678 pid=3687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465326661656235326665396432333534306163336335386364643132 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit: BPF prog-id=156 op=LOAD Jul 2 07:48:10.237000 audit[3687]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001df6f8 items=0 ppid=3678 pid=3687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465326661656235326665396432333534306163336335386364643132 Jul 2 07:48:10.237000 audit: BPF prog-id=156 op=UNLOAD Jul 2 07:48:10.237000 audit: BPF prog-id=155 op=UNLOAD Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { perfmon } for pid=3687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit[3687]: AVC avc: denied { bpf } for pid=3687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.237000 audit: BPF prog-id=157 op=LOAD Jul 2 07:48:10.237000 audit[3687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001dfb08 items=0 ppid=3678 pid=3687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465326661656235326665396432333534306163336335386364643132 Jul 2 07:48:10.240055 systemd-resolved[1136]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:48:10.246705 systemd[1]: Started cri-containerd-01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36.scope. Jul 2 07:48:10.253574 env[1201]: time="2024-07-02T07:48:10.253529174Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-75nhn,Uid:aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae,Namespace:calico-system,Attempt:1,} returns sandbox id \"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a\"" Jul 2 07:48:10.255214 env[1201]: time="2024-07-02T07:48:10.255188457Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\"" Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.258000 audit: BPF prog-id=158 op=LOAD Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3717 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031616339356235636634373332393564356137633764393039333631 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3717 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031616339356235636634373332393564356137633764393039333631 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit: BPF prog-id=159 op=LOAD Jul 2 07:48:10.259000 audit[3733]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003a3a70 items=0 ppid=3717 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031616339356235636634373332393564356137633764393039333631 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit: BPF prog-id=160 op=LOAD Jul 2 07:48:10.259000 audit[3733]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003a3ab8 items=0 ppid=3717 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031616339356235636634373332393564356137633764393039333631 Jul 2 07:48:10.259000 audit: BPF prog-id=160 op=UNLOAD Jul 2 07:48:10.259000 audit: BPF prog-id=159 op=UNLOAD Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { perfmon } for pid=3733 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit[3733]: AVC avc: denied { bpf } for pid=3733 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.259000 audit: BPF prog-id=161 op=LOAD Jul 2 07:48:10.259000 audit[3733]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a3ec8 items=0 ppid=3717 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031616339356235636634373332393564356137633764393039333631 Jul 2 07:48:10.261290 systemd-resolved[1136]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:48:10.286060 env[1201]: time="2024-07-02T07:48:10.286014817Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-mcrtl,Uid:a1e65ea0-0b20-4bca-bd1c-8dceff6f519a,Namespace:kube-system,Attempt:1,} returns sandbox id \"01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36\"" Jul 2 07:48:10.286974 kubelet[2038]: E0702 07:48:10.286780 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:10.288549 env[1201]: time="2024-07-02T07:48:10.288520246Z" level=info msg="CreateContainer within sandbox \"01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 2 07:48:10.301773 env[1201]: time="2024-07-02T07:48:10.301726609Z" level=info msg="CreateContainer within sandbox \"01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"35b9647dc18dd03734feb3a53e0785d379b11e6b4b97ba7542b8d5238bcdd178\"" Jul 2 07:48:10.302192 env[1201]: time="2024-07-02T07:48:10.302159121Z" level=info msg="StartContainer for \"35b9647dc18dd03734feb3a53e0785d379b11e6b4b97ba7542b8d5238bcdd178\"" Jul 2 07:48:10.314620 systemd[1]: Started cri-containerd-35b9647dc18dd03734feb3a53e0785d379b11e6b4b97ba7542b8d5238bcdd178.scope. Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.324000 audit: BPF prog-id=162 op=LOAD Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3717 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623936343764633138646430333733346665623361353365303738 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3717 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623936343764633138646430333733346665623361353365303738 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit: BPF prog-id=163 op=LOAD Jul 2 07:48:10.325000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00029eae0 items=0 ppid=3717 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623936343764633138646430333733346665623361353365303738 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit: BPF prog-id=164 op=LOAD Jul 2 07:48:10.325000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00029eb28 items=0 ppid=3717 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623936343764633138646430333733346665623361353365303738 Jul 2 07:48:10.325000 audit: BPF prog-id=164 op=UNLOAD Jul 2 07:48:10.325000 audit: BPF prog-id=163 op=UNLOAD Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { perfmon } for pid=3774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit[3774]: AVC avc: denied { bpf } for pid=3774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.325000 audit: BPF prog-id=165 op=LOAD Jul 2 07:48:10.325000 audit[3774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00029ef38 items=0 ppid=3717 pid=3774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335623936343764633138646430333733346665623361353365303738 Jul 2 07:48:10.337567 env[1201]: time="2024-07-02T07:48:10.337527062Z" level=info msg="StartContainer for \"35b9647dc18dd03734feb3a53e0785d379b11e6b4b97ba7542b8d5238bcdd178\" returns successfully" Jul 2 07:48:10.593643 kubelet[2038]: E0702 07:48:10.593294 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:10.596409 kubelet[2038]: E0702 07:48:10.596358 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:10.612918 kubelet[2038]: I0702 07:48:10.612874 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-mcrtl" podStartSLOduration=35.612824037 podStartE2EDuration="35.612824037s" podCreationTimestamp="2024-07-02 07:47:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-07-02 07:48:10.603857718 +0000 UTC m=+49.978160789" watchObservedRunningTime="2024-07-02 07:48:10.612824037 +0000 UTC m=+49.987127108" Jul 2 07:48:10.615000 audit[3806]: NETFILTER_CFG table=filter:108 family=2 entries=8 op=nft_register_rule pid=3806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:10.615000 audit[3806]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffd2aa93380 a2=0 a3=7ffd2aa9336c items=0 ppid=2236 pid=3806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.615000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:10.619000 audit[3806]: NETFILTER_CFG table=nat:109 family=2 entries=44 op=nft_register_rule pid=3806 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:10.619000 audit[3806]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd2aa93380 a2=0 a3=7ffd2aa9336c items=0 ppid=2236 pid=3806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.619000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:10.741072 env[1201]: time="2024-07-02T07:48:10.741016853Z" level=info msg="StopPodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\"" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.810 [INFO][3823] k8s.go 608: Cleaning up netns ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.810 [INFO][3823] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" iface="eth0" netns="/var/run/netns/cni-10cbef23-caf0-006c-f7c0-f5c4e033978e" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.811 [INFO][3823] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" iface="eth0" netns="/var/run/netns/cni-10cbef23-caf0-006c-f7c0-f5c4e033978e" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.811 [INFO][3823] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" iface="eth0" netns="/var/run/netns/cni-10cbef23-caf0-006c-f7c0-f5c4e033978e" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.811 [INFO][3823] k8s.go 615: Releasing IP address(es) ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.811 [INFO][3823] utils.go 188: Calico CNI releasing IP address ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.827 [INFO][3830] ipam_plugin.go 411: Releasing address using handleID ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.827 [INFO][3830] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.828 [INFO][3830] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.833 [WARNING][3830] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.833 [INFO][3830] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.834 [INFO][3830] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:10.836942 env[1201]: 2024-07-02 07:48:10.835 [INFO][3823] k8s.go 621: Teardown processing complete. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:10.837437 env[1201]: time="2024-07-02T07:48:10.837068101Z" level=info msg="TearDown network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" successfully" Jul 2 07:48:10.837437 env[1201]: time="2024-07-02T07:48:10.837098182Z" level=info msg="StopPodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" returns successfully" Jul 2 07:48:10.837837 env[1201]: time="2024-07-02T07:48:10.837795918Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85d87685d8-466ls,Uid:9157f811-aa2f-4b5b-9f96-f953e6ffd3df,Namespace:calico-system,Attempt:1,}" Jul 2 07:48:10.869132 systemd[1]: run-netns-cni\x2d10cbef23\x2dcaf0\x2d006c\x2df7c0\x2df5c4e033978e.mount: Deactivated successfully. Jul 2 07:48:10.944765 systemd-networkd[1015]: cali2b07c774747: Link UP Jul 2 07:48:10.946099 systemd-networkd[1015]: cali2b07c774747: Gained carrier Jul 2 07:48:10.946391 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2b07c774747: link becomes ready Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.883 [INFO][3838] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0 calico-kube-controllers-85d87685d8- calico-system 9157f811-aa2f-4b5b-9f96-f953e6ffd3df 918 0 2024-07-02 07:47:42 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:85d87685d8 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-85d87685d8-466ls eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali2b07c774747 [] []}} ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.883 [INFO][3838] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.908 [INFO][3852] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" HandleID="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.920 [INFO][3852] ipam_plugin.go 264: Auto assigning IP ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" HandleID="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000322490), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-85d87685d8-466ls", "timestamp":"2024-07-02 07:48:10.908788459 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.920 [INFO][3852] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.920 [INFO][3852] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.920 [INFO][3852] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.922 [INFO][3852] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.925 [INFO][3852] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.929 [INFO][3852] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.930 [INFO][3852] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.932 [INFO][3852] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.932 [INFO][3852] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.933 [INFO][3852] ipam.go 1685: Creating new handle: k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8 Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.936 [INFO][3852] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.941 [INFO][3852] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.941 [INFO][3852] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" host="localhost" Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.941 [INFO][3852] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:10.960003 env[1201]: 2024-07-02 07:48:10.941 [INFO][3852] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" HandleID="k8s-pod-network.9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.960825 env[1201]: 2024-07-02 07:48:10.943 [INFO][3838] k8s.go 386: Populated endpoint ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0", GenerateName:"calico-kube-controllers-85d87685d8-", Namespace:"calico-system", SelfLink:"", UID:"9157f811-aa2f-4b5b-9f96-f953e6ffd3df", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85d87685d8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-85d87685d8-466ls", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali2b07c774747", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:10.960825 env[1201]: 2024-07-02 07:48:10.943 [INFO][3838] k8s.go 387: Calico CNI using IPs: [192.168.88.132/32] ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.960825 env[1201]: 2024-07-02 07:48:10.943 [INFO][3838] dataplane_linux.go 68: Setting the host side veth name to cali2b07c774747 ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.960825 env[1201]: 2024-07-02 07:48:10.946 [INFO][3838] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.960825 env[1201]: 2024-07-02 07:48:10.946 [INFO][3838] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0", GenerateName:"calico-kube-controllers-85d87685d8-", Namespace:"calico-system", SelfLink:"", UID:"9157f811-aa2f-4b5b-9f96-f953e6ffd3df", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85d87685d8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8", Pod:"calico-kube-controllers-85d87685d8-466ls", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali2b07c774747", MAC:"c6:72:54:c6:4b:7c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:10.960825 env[1201]: 2024-07-02 07:48:10.956 [INFO][3838] k8s.go 500: Wrote updated endpoint to datastore ContainerID="9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8" Namespace="calico-system" Pod="calico-kube-controllers-85d87685d8-466ls" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:10.968000 audit[3875]: NETFILTER_CFG table=filter:110 family=2 entries=38 op=nft_register_chain pid=3875 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:10.968000 audit[3875]: SYSCALL arch=c000003e syscall=46 success=yes exit=19812 a0=3 a1=7ffe8ec6cb30 a2=0 a3=7ffe8ec6cb1c items=0 ppid=3166 pid=3875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.968000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:10.971810 env[1201]: time="2024-07-02T07:48:10.971717860Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:10.971810 env[1201]: time="2024-07-02T07:48:10.971774965Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:10.971810 env[1201]: time="2024-07-02T07:48:10.971790016Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:10.972231 env[1201]: time="2024-07-02T07:48:10.972157316Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8 pid=3882 runtime=io.containerd.runc.v2 Jul 2 07:48:10.988736 systemd[1]: Started cri-containerd-9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8.scope. Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit: BPF prog-id=166 op=LOAD Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3882 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323631333135623966376135393534353636636363653161396433 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3882 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323631333135623966376135393534353636636363653161396433 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit: BPF prog-id=167 op=LOAD Jul 2 07:48:10.999000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000220410 items=0 ppid=3882 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323631333135623966376135393534353636636363653161396433 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:10.999000 audit: BPF prog-id=168 op=LOAD Jul 2 07:48:10.999000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000220458 items=0 ppid=3882 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:10.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323631333135623966376135393534353636636363653161396433 Jul 2 07:48:11.000000 audit: BPF prog-id=168 op=UNLOAD Jul 2 07:48:11.000000 audit: BPF prog-id=167 op=UNLOAD Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { perfmon } for pid=3891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit[3891]: AVC avc: denied { bpf } for pid=3891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.000000 audit: BPF prog-id=169 op=LOAD Jul 2 07:48:11.000000 audit[3891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000220868 items=0 ppid=3882 pid=3891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323631333135623966376135393534353636636363653161396433 Jul 2 07:48:11.002585 systemd-resolved[1136]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:48:11.024544 env[1201]: time="2024-07-02T07:48:11.024483974Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-85d87685d8-466ls,Uid:9157f811-aa2f-4b5b-9f96-f953e6ffd3df,Namespace:calico-system,Attempt:1,} returns sandbox id \"9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8\"" Jul 2 07:48:11.533854 env[1201]: time="2024-07-02T07:48:11.533801643Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.535700 env[1201]: time="2024-07-02T07:48:11.535675116Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.536995 env[1201]: time="2024-07-02T07:48:11.536963560Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.538303 env[1201]: time="2024-07-02T07:48:11.538277917Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:ac5f0089ad8eab325e5d16a59536f9292619adf16736b1554a439a66d543a63d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:11.538747 env[1201]: time="2024-07-02T07:48:11.538711890Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.28.0\" returns image reference \"sha256:1a094aeaf1521e225668c83cbf63c0ec63afbdb8c4dd7c3d2aab0ec917d103de\"" Jul 2 07:48:11.539371 env[1201]: time="2024-07-02T07:48:11.539261767Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\"" Jul 2 07:48:11.540056 env[1201]: time="2024-07-02T07:48:11.540032810Z" level=info msg="CreateContainer within sandbox \"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 2 07:48:11.554195 env[1201]: time="2024-07-02T07:48:11.554160406Z" level=info msg="CreateContainer within sandbox \"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"866d47832b4e82f0035537a01ffd39a4a44af84e180d8186d3eb1fb09d92ee4c\"" Jul 2 07:48:11.554750 env[1201]: time="2024-07-02T07:48:11.554719993Z" level=info msg="StartContainer for \"866d47832b4e82f0035537a01ffd39a4a44af84e180d8186d3eb1fb09d92ee4c\"" Jul 2 07:48:11.567522 systemd[1]: Started cri-containerd-866d47832b4e82f0035537a01ffd39a4a44af84e180d8186d3eb1fb09d92ee4c.scope. Jul 2 07:48:11.577900 systemd-networkd[1015]: caliebe89c14385: Gained IPv6LL Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f100de10488 items=0 ppid=3678 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836366434373833326234653832663030333535333761303166666433 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit: BPF prog-id=170 op=LOAD Jul 2 07:48:11.585000 audit[3931]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00027dba8 items=0 ppid=3678 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836366434373833326234653832663030333535333761303166666433 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit: BPF prog-id=171 op=LOAD Jul 2 07:48:11.585000 audit[3931]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00027dbf8 items=0 ppid=3678 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836366434373833326234653832663030333535333761303166666433 Jul 2 07:48:11.585000 audit: BPF prog-id=171 op=UNLOAD Jul 2 07:48:11.585000 audit: BPF prog-id=170 op=UNLOAD Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:11.585000 audit: BPF prog-id=172 op=LOAD Jul 2 07:48:11.585000 audit[3931]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00027dc88 items=0 ppid=3678 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836366434373833326234653832663030333535333761303166666433 Jul 2 07:48:11.600132 env[1201]: time="2024-07-02T07:48:11.600097642Z" level=info msg="StartContainer for \"866d47832b4e82f0035537a01ffd39a4a44af84e180d8186d3eb1fb09d92ee4c\" returns successfully" Jul 2 07:48:11.602027 kubelet[2038]: E0702 07:48:11.602010 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:11.627000 audit[3958]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=3958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:11.627000 audit[3958]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffed4799610 a2=0 a3=7ffed47995fc items=0 ppid=2236 pid=3958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.627000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:11.631000 audit[3958]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=3958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:11.631000 audit[3958]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffed4799610 a2=0 a3=7ffed47995fc items=0 ppid=2236 pid=3958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:11.631000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:11.893423 systemd-networkd[1015]: calie643bfa4c9e: Gained IPv6LL Jul 2 07:48:12.312522 systemd[1]: Started sshd@13-10.0.0.78:22-10.0.0.1:52754.service. Jul 2 07:48:12.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.78:22-10.0.0.1:52754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:12.314352 kernel: kauditd_printk_skb: 422 callbacks suppressed Jul 2 07:48:12.314410 kernel: audit: type=1130 audit(1719906492.311:1197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.78:22-10.0.0.1:52754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:12.355000 audit[3961]: USER_ACCT pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.357339 sshd[3961]: Accepted publickey for core from 10.0.0.1 port 52754 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:12.366140 kernel: audit: type=1101 audit(1719906492.355:1198): pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.366237 kernel: audit: type=1103 audit(1719906492.356:1199): pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.356000 audit[3961]: CRED_ACQ pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.361494 sshd[3961]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:12.366752 systemd[1]: Started session-14.scope. Jul 2 07:48:12.367082 systemd-logind[1186]: New session 14 of user core. Jul 2 07:48:12.356000 audit[3961]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca282d690 a2=3 a3=0 items=0 ppid=1 pid=3961 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:12.374684 kernel: audit: type=1006 audit(1719906492.356:1200): pid=3961 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 2 07:48:12.374734 kernel: audit: type=1300 audit(1719906492.356:1200): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca282d690 a2=3 a3=0 items=0 ppid=1 pid=3961 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:12.376418 kernel: audit: type=1327 audit(1719906492.356:1200): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:12.356000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:12.381430 kernel: audit: type=1105 audit(1719906492.372:1201): pid=3961 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.372000 audit[3961]: USER_START pid=3961 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.385491 kernel: audit: type=1103 audit(1719906492.374:1202): pid=3963 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.374000 audit[3963]: CRED_ACQ pid=3963 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.490989 sshd[3961]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:12.500420 kernel: audit: type=1106 audit(1719906492.491:1203): pid=3961 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.500552 kernel: audit: type=1104 audit(1719906492.491:1204): pid=3961 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.491000 audit[3961]: USER_END pid=3961 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.491000 audit[3961]: CRED_DISP pid=3961 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:12.493919 systemd[1]: sshd@13-10.0.0.78:22-10.0.0.1:52754.service: Deactivated successfully. Jul 2 07:48:12.494540 systemd[1]: session-14.scope: Deactivated successfully. Jul 2 07:48:12.495194 systemd-logind[1186]: Session 14 logged out. Waiting for processes to exit. Jul 2 07:48:12.495776 systemd-logind[1186]: Removed session 14. Jul 2 07:48:12.492000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.78:22-10.0.0.1:52754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:12.604879 kubelet[2038]: E0702 07:48:12.604781 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:12.725493 systemd-networkd[1015]: cali2b07c774747: Gained IPv6LL Jul 2 07:48:13.693596 env[1201]: time="2024-07-02T07:48:13.693541832Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:13.695793 env[1201]: time="2024-07-02T07:48:13.695755112Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:13.697523 env[1201]: time="2024-07-02T07:48:13.697491263Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:13.699156 env[1201]: time="2024-07-02T07:48:13.699109406Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c35e88abef622483409fff52313bf764a75095197be4c5a7c7830da342654de1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:13.699569 env[1201]: time="2024-07-02T07:48:13.699537887Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.28.0\" returns image reference \"sha256:428d92b02253980b402b9fb18f4cb58be36dc6bcf4893e07462732cb926ea783\"" Jul 2 07:48:13.700330 env[1201]: time="2024-07-02T07:48:13.700121831Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\"" Jul 2 07:48:13.705004 env[1201]: time="2024-07-02T07:48:13.704978867Z" level=info msg="CreateContainer within sandbox \"9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 2 07:48:13.719155 env[1201]: time="2024-07-02T07:48:13.719114487Z" level=info msg="CreateContainer within sandbox \"9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"8e8eca519be0c65f5693e49335d76d524b30febe3bf60a9627024eb688b67d2e\"" Jul 2 07:48:13.719598 env[1201]: time="2024-07-02T07:48:13.719567668Z" level=info msg="StartContainer for \"8e8eca519be0c65f5693e49335d76d524b30febe3bf60a9627024eb688b67d2e\"" Jul 2 07:48:13.737391 systemd[1]: Started cri-containerd-8e8eca519be0c65f5693e49335d76d524b30febe3bf60a9627024eb688b67d2e.scope. Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit: BPF prog-id=173 op=LOAD Jul 2 07:48:13.747000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[3983]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3882 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865386563613531396265306336356635363933653439333335643736 Jul 2 07:48:13.747000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.747000 audit[3983]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3882 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865386563613531396265306336356635363933653439333335643736 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit: BPF prog-id=174 op=LOAD Jul 2 07:48:13.748000 audit[3983]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00027bdc0 items=0 ppid=3882 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865386563613531396265306336356635363933653439333335643736 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit: BPF prog-id=175 op=LOAD Jul 2 07:48:13.748000 audit[3983]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00027be08 items=0 ppid=3882 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865386563613531396265306336356635363933653439333335643736 Jul 2 07:48:13.748000 audit: BPF prog-id=175 op=UNLOAD Jul 2 07:48:13.748000 audit: BPF prog-id=174 op=UNLOAD Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { perfmon } for pid=3983 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit[3983]: AVC avc: denied { bpf } for pid=3983 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:13.748000 audit: BPF prog-id=176 op=LOAD Jul 2 07:48:13.748000 audit[3983]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d6218 items=0 ppid=3882 pid=3983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:13.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865386563613531396265306336356635363933653439333335643736 Jul 2 07:48:13.770442 env[1201]: time="2024-07-02T07:48:13.770308906Z" level=info msg="StartContainer for \"8e8eca519be0c65f5693e49335d76d524b30febe3bf60a9627024eb688b67d2e\" returns successfully" Jul 2 07:48:14.618594 kubelet[2038]: I0702 07:48:14.617910 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-85d87685d8-466ls" podStartSLOduration=29.943646868 podStartE2EDuration="32.617869196s" podCreationTimestamp="2024-07-02 07:47:42 +0000 UTC" firstStartedPulling="2024-07-02 07:48:11.025637627 +0000 UTC m=+50.399940698" lastFinishedPulling="2024-07-02 07:48:13.699859955 +0000 UTC m=+53.074163026" observedRunningTime="2024-07-02 07:48:14.616508804 +0000 UTC m=+53.990811875" watchObservedRunningTime="2024-07-02 07:48:14.617869196 +0000 UTC m=+53.992172268" Jul 2 07:48:15.247576 env[1201]: time="2024-07-02T07:48:15.247520232Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:15.249682 env[1201]: time="2024-07-02T07:48:15.249632753Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:15.251171 env[1201]: time="2024-07-02T07:48:15.251122765Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:15.252604 env[1201]: time="2024-07-02T07:48:15.252570062Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:b3caf3e7b3042b293728a5ab55d893798d60fec55993a9531e82997de0e534cc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:15.252979 env[1201]: time="2024-07-02T07:48:15.252945817Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.28.0\" returns image reference \"sha256:0f80feca743f4a84ddda4057266092db9134f9af9e20e12ea6fcfe51d7e3a020\"" Jul 2 07:48:15.254504 env[1201]: time="2024-07-02T07:48:15.254470277Z" level=info msg="CreateContainer within sandbox \"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 2 07:48:15.268818 env[1201]: time="2024-07-02T07:48:15.268768477Z" level=info msg="CreateContainer within sandbox \"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"809546bb635251fa9e8b805be4c90bdcc985c26bfda9dd288448b94574d3d77f\"" Jul 2 07:48:15.269429 env[1201]: time="2024-07-02T07:48:15.269368101Z" level=info msg="StartContainer for \"809546bb635251fa9e8b805be4c90bdcc985c26bfda9dd288448b94574d3d77f\"" Jul 2 07:48:15.289907 systemd[1]: Started cri-containerd-809546bb635251fa9e8b805be4c90bdcc985c26bfda9dd288448b94574d3d77f.scope. Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f3dca5cff38 items=0 ppid=3678 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:15.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830393534366262363335323531666139653862383035626534633930 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit: BPF prog-id=177 op=LOAD Jul 2 07:48:15.303000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00008f288 items=0 ppid=3678 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:15.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830393534366262363335323531666139653862383035626534633930 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit: BPF prog-id=178 op=LOAD Jul 2 07:48:15.303000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00008f2d8 items=0 ppid=3678 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:15.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830393534366262363335323531666139653862383035626534633930 Jul 2 07:48:15.303000 audit: BPF prog-id=178 op=UNLOAD Jul 2 07:48:15.303000 audit: BPF prog-id=177 op=UNLOAD Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:15.303000 audit: BPF prog-id=179 op=LOAD Jul 2 07:48:15.303000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00008f368 items=0 ppid=3678 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:15.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3830393534366262363335323531666139653862383035626534633930 Jul 2 07:48:15.316523 env[1201]: time="2024-07-02T07:48:15.316463236Z" level=info msg="StartContainer for \"809546bb635251fa9e8b805be4c90bdcc985c26bfda9dd288448b94574d3d77f\" returns successfully" Jul 2 07:48:15.622491 kubelet[2038]: I0702 07:48:15.622373 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-75nhn" podStartSLOduration=28.623632626 podStartE2EDuration="33.622300689s" podCreationTimestamp="2024-07-02 07:47:42 +0000 UTC" firstStartedPulling="2024-07-02 07:48:10.254550201 +0000 UTC m=+49.628853272" lastFinishedPulling="2024-07-02 07:48:15.253218274 +0000 UTC m=+54.627521335" observedRunningTime="2024-07-02 07:48:15.621405411 +0000 UTC m=+54.995708492" watchObservedRunningTime="2024-07-02 07:48:15.622300689 +0000 UTC m=+54.996603780" Jul 2 07:48:15.704872 systemd[1]: run-containerd-runc-k8s.io-809546bb635251fa9e8b805be4c90bdcc985c26bfda9dd288448b94574d3d77f-runc.xa2M9K.mount: Deactivated successfully. Jul 2 07:48:15.796106 kubelet[2038]: I0702 07:48:15.796073 2038 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 2 07:48:15.796947 kubelet[2038]: I0702 07:48:15.796933 2038 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 2 07:48:16.668000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.668000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.668000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0020ac3f0 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:48:16.668000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002769200 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:48:16.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:16.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:16.976000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.976000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.976000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00f22e750 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:48:16.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:48:16.976000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00746fbe0 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:48:16.976000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:48:16.977000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.977000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00f388a20 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:48:16.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:48:16.977000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.977000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00746fc00 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:48:16.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:48:16.978000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.978000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00f388a50 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:48:16.978000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:48:16.978000 audit[1923]: AVC avc: denied { watch } for pid=1923 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:16.978000 audit[1923]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00ea4af00 a2=fc6 a3=0 items=0 ppid=1780 pid=1923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c900,c1003 key=(null) Jul 2 07:48:16.978000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3738002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 2 07:48:17.495330 systemd[1]: Started sshd@14-10.0.0.78:22-10.0.0.1:56282.service. Jul 2 07:48:17.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.78:22-10.0.0.1:56282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:17.497098 kernel: kauditd_printk_skb: 125 callbacks suppressed Jul 2 07:48:17.497162 kernel: audit: type=1130 audit(1719906497.494:1238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.78:22-10.0.0.1:56282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:17.532000 audit[4085]: USER_ACCT pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.534500 sshd[4085]: Accepted publickey for core from 10.0.0.1 port 56282 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:17.537000 audit[4085]: CRED_ACQ pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.539089 sshd[4085]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:17.542715 systemd-logind[1186]: New session 15 of user core. Jul 2 07:48:17.543429 kernel: audit: type=1101 audit(1719906497.532:1239): pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.543458 kernel: audit: type=1103 audit(1719906497.537:1240): pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.543474 kernel: audit: type=1006 audit(1719906497.537:1241): pid=4085 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 2 07:48:17.543814 systemd[1]: Started session-15.scope. Jul 2 07:48:17.550407 kernel: audit: type=1300 audit(1719906497.537:1241): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbd40f680 a2=3 a3=0 items=0 ppid=1 pid=4085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:17.537000 audit[4085]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbd40f680 a2=3 a3=0 items=0 ppid=1 pid=4085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:17.537000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:17.552247 kernel: audit: type=1327 audit(1719906497.537:1241): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:17.552308 kernel: audit: type=1105 audit(1719906497.547:1242): pid=4085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.547000 audit[4085]: USER_START pid=4085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.557872 kernel: audit: type=1103 audit(1719906497.548:1243): pid=4087 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.548000 audit[4087]: CRED_ACQ pid=4087 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.661684 sshd[4085]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:17.661000 audit[4085]: USER_END pid=4085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.663896 systemd[1]: sshd@14-10.0.0.78:22-10.0.0.1:56282.service: Deactivated successfully. Jul 2 07:48:17.664590 systemd[1]: session-15.scope: Deactivated successfully. Jul 2 07:48:17.665251 systemd-logind[1186]: Session 15 logged out. Waiting for processes to exit. Jul 2 07:48:17.665914 systemd-logind[1186]: Removed session 15. Jul 2 07:48:17.661000 audit[4085]: CRED_DISP pid=4085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.671014 kernel: audit: type=1106 audit(1719906497.661:1244): pid=4085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.671109 kernel: audit: type=1104 audit(1719906497.661:1245): pid=4085 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:17.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.78:22-10.0.0.1:56282 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:20.719130 env[1201]: time="2024-07-02T07:48:20.719084766Z" level=info msg="StopPodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\"" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.751 [WARNING][4112] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--75nhn-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a", Pod:"csi-node-driver-75nhn", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie643bfa4c9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.751 [INFO][4112] k8s.go 608: Cleaning up netns ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.751 [INFO][4112] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" iface="eth0" netns="" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.751 [INFO][4112] k8s.go 615: Releasing IP address(es) ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.751 [INFO][4112] utils.go 188: Calico CNI releasing IP address ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.769 [INFO][4121] ipam_plugin.go 411: Releasing address using handleID ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.769 [INFO][4121] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.769 [INFO][4121] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.774 [WARNING][4121] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.774 [INFO][4121] ipam_plugin.go 439: Releasing address using workloadID ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.775 [INFO][4121] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:20.780023 env[1201]: 2024-07-02 07:48:20.777 [INFO][4112] k8s.go 621: Teardown processing complete. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.780497 env[1201]: time="2024-07-02T07:48:20.780056194Z" level=info msg="TearDown network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" successfully" Jul 2 07:48:20.780497 env[1201]: time="2024-07-02T07:48:20.780084445Z" level=info msg="StopPodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" returns successfully" Jul 2 07:48:20.780722 env[1201]: time="2024-07-02T07:48:20.780689070Z" level=info msg="RemovePodSandbox for \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\"" Jul 2 07:48:20.780786 env[1201]: time="2024-07-02T07:48:20.780730114Z" level=info msg="Forcibly stopping sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\"" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.934 [WARNING][4143] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--75nhn-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"aeba58ac-e31b-4e0c-ab3d-2ea2da5f68ae", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"7d7f6c786c", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"de2faeb52fe9d23540ac3c58cdd1282f40645648337296fa3fed0cbacfb7354a", Pod:"csi-node-driver-75nhn", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie643bfa4c9e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.934 [INFO][4143] k8s.go 608: Cleaning up netns ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.934 [INFO][4143] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" iface="eth0" netns="" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.934 [INFO][4143] k8s.go 615: Releasing IP address(es) ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.934 [INFO][4143] utils.go 188: Calico CNI releasing IP address ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.951 [INFO][4150] ipam_plugin.go 411: Releasing address using handleID ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.952 [INFO][4150] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.953 [INFO][4150] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.958 [WARNING][4150] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.958 [INFO][4150] ipam_plugin.go 439: Releasing address using workloadID ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" HandleID="k8s-pod-network.9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Workload="localhost-k8s-csi--node--driver--75nhn-eth0" Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.959 [INFO][4150] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:20.961809 env[1201]: 2024-07-02 07:48:20.960 [INFO][4143] k8s.go 621: Teardown processing complete. ContainerID="9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2" Jul 2 07:48:20.962280 env[1201]: time="2024-07-02T07:48:20.961824482Z" level=info msg="TearDown network for sandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" successfully" Jul 2 07:48:21.199508 env[1201]: time="2024-07-02T07:48:21.199461230Z" level=info msg="RemovePodSandbox \"9eacced504bd6f2773a167df7c0c982f378bb87310b71fa2571a9fc32af664c2\" returns successfully" Jul 2 07:48:21.199845 env[1201]: time="2024-07-02T07:48:21.199810499Z" level=info msg="StopPodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\"" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.241 [WARNING][4175] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--mcrtl-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a", ResourceVersion:"912", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36", Pod:"coredns-76f75df574-mcrtl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe89c14385", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.242 [INFO][4175] k8s.go 608: Cleaning up netns ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.242 [INFO][4175] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" iface="eth0" netns="" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.242 [INFO][4175] k8s.go 615: Releasing IP address(es) ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.242 [INFO][4175] utils.go 188: Calico CNI releasing IP address ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.260 [INFO][4184] ipam_plugin.go 411: Releasing address using handleID ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.260 [INFO][4184] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.260 [INFO][4184] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.265 [WARNING][4184] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.265 [INFO][4184] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.266 [INFO][4184] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:21.269376 env[1201]: 2024-07-02 07:48:21.268 [INFO][4175] k8s.go 621: Teardown processing complete. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.269839 env[1201]: time="2024-07-02T07:48:21.269406949Z" level=info msg="TearDown network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" successfully" Jul 2 07:48:21.269839 env[1201]: time="2024-07-02T07:48:21.269436914Z" level=info msg="StopPodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" returns successfully" Jul 2 07:48:21.269958 env[1201]: time="2024-07-02T07:48:21.269915715Z" level=info msg="RemovePodSandbox for \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\"" Jul 2 07:48:21.270109 env[1201]: time="2024-07-02T07:48:21.269958131Z" level=info msg="Forcibly stopping sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\"" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.300 [WARNING][4206] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--mcrtl-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"a1e65ea0-0b20-4bca-bd1c-8dceff6f519a", ResourceVersion:"912", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"01ac95b5cf473295d5a7c7d90936199d94d951b0983b7a986b81e0d633b15b36", Pod:"coredns-76f75df574-mcrtl", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliebe89c14385", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.300 [INFO][4206] k8s.go 608: Cleaning up netns ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.300 [INFO][4206] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" iface="eth0" netns="" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.301 [INFO][4206] k8s.go 615: Releasing IP address(es) ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.301 [INFO][4206] utils.go 188: Calico CNI releasing IP address ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.317 [INFO][4213] ipam_plugin.go 411: Releasing address using handleID ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.318 [INFO][4213] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.318 [INFO][4213] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.327 [WARNING][4213] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.327 [INFO][4213] ipam_plugin.go 439: Releasing address using workloadID ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" HandleID="k8s-pod-network.5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Workload="localhost-k8s-coredns--76f75df574--mcrtl-eth0" Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.329 [INFO][4213] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:21.331720 env[1201]: 2024-07-02 07:48:21.330 [INFO][4206] k8s.go 621: Teardown processing complete. ContainerID="5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950" Jul 2 07:48:21.332434 env[1201]: time="2024-07-02T07:48:21.331720952Z" level=info msg="TearDown network for sandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" successfully" Jul 2 07:48:21.335173 env[1201]: time="2024-07-02T07:48:21.335134927Z" level=info msg="RemovePodSandbox \"5253197c63b9e6ccb8cb8bdfb964e93217e4cd3b17abdddd29cd0541c2e5a950\" returns successfully" Jul 2 07:48:21.335786 env[1201]: time="2024-07-02T07:48:21.335736680Z" level=info msg="StopPodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\"" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.364 [WARNING][4236] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0", GenerateName:"calico-kube-controllers-85d87685d8-", Namespace:"calico-system", SelfLink:"", UID:"9157f811-aa2f-4b5b-9f96-f953e6ffd3df", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85d87685d8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8", Pod:"calico-kube-controllers-85d87685d8-466ls", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali2b07c774747", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.364 [INFO][4236] k8s.go 608: Cleaning up netns ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.364 [INFO][4236] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" iface="eth0" netns="" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.365 [INFO][4236] k8s.go 615: Releasing IP address(es) ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.365 [INFO][4236] utils.go 188: Calico CNI releasing IP address ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.381 [INFO][4244] ipam_plugin.go 411: Releasing address using handleID ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.381 [INFO][4244] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.381 [INFO][4244] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.386 [WARNING][4244] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.386 [INFO][4244] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.387 [INFO][4244] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:21.390402 env[1201]: 2024-07-02 07:48:21.389 [INFO][4236] k8s.go 621: Teardown processing complete. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.390847 env[1201]: time="2024-07-02T07:48:21.390430819Z" level=info msg="TearDown network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" successfully" Jul 2 07:48:21.390847 env[1201]: time="2024-07-02T07:48:21.390460011Z" level=info msg="StopPodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" returns successfully" Jul 2 07:48:21.391109 env[1201]: time="2024-07-02T07:48:21.391067575Z" level=info msg="RemovePodSandbox for \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\"" Jul 2 07:48:21.391154 env[1201]: time="2024-07-02T07:48:21.391107857Z" level=info msg="Forcibly stopping sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\"" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.418 [WARNING][4267] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0", GenerateName:"calico-kube-controllers-85d87685d8-", Namespace:"calico-system", SelfLink:"", UID:"9157f811-aa2f-4b5b-9f96-f953e6ffd3df", ResourceVersion:"952", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"85d87685d8", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9b261315b9f7a5954566ccce1a9d3d2b4a337ca27405fc0ff149aae68ae6c1e8", Pod:"calico-kube-controllers-85d87685d8-466ls", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali2b07c774747", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.418 [INFO][4267] k8s.go 608: Cleaning up netns ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.418 [INFO][4267] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" iface="eth0" netns="" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.419 [INFO][4267] k8s.go 615: Releasing IP address(es) ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.419 [INFO][4267] utils.go 188: Calico CNI releasing IP address ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.436 [INFO][4274] ipam_plugin.go 411: Releasing address using handleID ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.436 [INFO][4274] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.436 [INFO][4274] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.480 [WARNING][4274] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.480 [INFO][4274] ipam_plugin.go 439: Releasing address using workloadID ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" HandleID="k8s-pod-network.6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Workload="localhost-k8s-calico--kube--controllers--85d87685d8--466ls-eth0" Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.482 [INFO][4274] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:21.485623 env[1201]: 2024-07-02 07:48:21.484 [INFO][4267] k8s.go 621: Teardown processing complete. ContainerID="6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e" Jul 2 07:48:21.485623 env[1201]: time="2024-07-02T07:48:21.485596168Z" level=info msg="TearDown network for sandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" successfully" Jul 2 07:48:21.561609 env[1201]: time="2024-07-02T07:48:21.561552225Z" level=info msg="RemovePodSandbox \"6d511946de280ad91f2c3ca93df2004c33f04b483fc345fa655d5e8bb8f2048e\" returns successfully" Jul 2 07:48:21.562103 env[1201]: time="2024-07-02T07:48:21.562075245Z" level=info msg="StopPodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\"" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.601 [WARNING][4297] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--js22z-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"edef516b-fcf8-4723-908e-6259a8a37eff", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09", Pod:"coredns-76f75df574-js22z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali332fb74295f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.601 [INFO][4297] k8s.go 608: Cleaning up netns ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.601 [INFO][4297] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" iface="eth0" netns="" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.601 [INFO][4297] k8s.go 615: Releasing IP address(es) ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.601 [INFO][4297] utils.go 188: Calico CNI releasing IP address ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.619 [INFO][4304] ipam_plugin.go 411: Releasing address using handleID ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.619 [INFO][4304] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.619 [INFO][4304] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.624 [WARNING][4304] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.624 [INFO][4304] ipam_plugin.go 439: Releasing address using workloadID ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.625 [INFO][4304] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:21.628239 env[1201]: 2024-07-02 07:48:21.626 [INFO][4297] k8s.go 621: Teardown processing complete. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.628711 env[1201]: time="2024-07-02T07:48:21.628261438Z" level=info msg="TearDown network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" successfully" Jul 2 07:48:21.628711 env[1201]: time="2024-07-02T07:48:21.628285181Z" level=info msg="StopPodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" returns successfully" Jul 2 07:48:21.628711 env[1201]: time="2024-07-02T07:48:21.628565585Z" level=info msg="RemovePodSandbox for \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\"" Jul 2 07:48:21.628711 env[1201]: time="2024-07-02T07:48:21.628595690Z" level=info msg="Forcibly stopping sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\"" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.657 [WARNING][4326] k8s.go 572: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--js22z-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"edef516b-fcf8-4723-908e-6259a8a37eff", ResourceVersion:"866", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 47, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1444f3ee0e033c55b3d771779d101009a58db185f48ee29df3988699ad1bfd09", Pod:"coredns-76f75df574-js22z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali332fb74295f", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.657 [INFO][4326] k8s.go 608: Cleaning up netns ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.657 [INFO][4326] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" iface="eth0" netns="" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.657 [INFO][4326] k8s.go 615: Releasing IP address(es) ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.657 [INFO][4326] utils.go 188: Calico CNI releasing IP address ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.673 [INFO][4334] ipam_plugin.go 411: Releasing address using handleID ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.674 [INFO][4334] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.674 [INFO][4334] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.679 [WARNING][4334] ipam_plugin.go 428: Asked to release address but it doesn't exist. Ignoring ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.679 [INFO][4334] ipam_plugin.go 439: Releasing address using workloadID ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" HandleID="k8s-pod-network.f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Workload="localhost-k8s-coredns--76f75df574--js22z-eth0" Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.681 [INFO][4334] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:21.683976 env[1201]: 2024-07-02 07:48:21.682 [INFO][4326] k8s.go 621: Teardown processing complete. ContainerID="f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834" Jul 2 07:48:21.684623 env[1201]: time="2024-07-02T07:48:21.683998665Z" level=info msg="TearDown network for sandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" successfully" Jul 2 07:48:21.687354 env[1201]: time="2024-07-02T07:48:21.687292803Z" level=info msg="RemovePodSandbox \"f41c88eeaccfd099f6e57e1b49554fe01d2f3a2db515b803da8ab119c5d68834\" returns successfully" Jul 2 07:48:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002568c00 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:48:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:22.124000 audit[1917]: AVC avc: denied { watch } for pid=1917 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 2 07:48:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002b50420 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:48:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002769c80 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:48:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:22.124000 audit[1917]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00290e280 a2=fc6 a3=0 items=0 ppid=1766 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c256,c564 key=(null) Jul 2 07:48:22.124000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 2 07:48:22.666849 systemd[1]: Started sshd@15-10.0.0.78:22-10.0.0.1:37354.service. Jul 2 07:48:22.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.78:22-10.0.0.1:37354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:22.668254 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 2 07:48:22.668325 kernel: audit: type=1130 audit(1719906502.665:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.78:22-10.0.0.1:37354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:22.703000 audit[4343]: USER_ACCT pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.705421 sshd[4343]: Accepted publickey for core from 10.0.0.1 port 37354 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:22.707533 sshd[4343]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:22.705000 audit[4343]: CRED_ACQ pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.711327 systemd-logind[1186]: New session 16 of user core. Jul 2 07:48:22.712289 systemd[1]: Started session-16.scope. Jul 2 07:48:22.714173 kernel: audit: type=1101 audit(1719906502.703:1252): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.714236 kernel: audit: type=1103 audit(1719906502.705:1253): pid=4343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.714259 kernel: audit: type=1006 audit(1719906502.705:1254): pid=4343 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 2 07:48:22.705000 audit[4343]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd13f94e0 a2=3 a3=0 items=0 ppid=1 pid=4343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:22.720894 kernel: audit: type=1300 audit(1719906502.705:1254): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd13f94e0 a2=3 a3=0 items=0 ppid=1 pid=4343 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:22.720946 kernel: audit: type=1327 audit(1719906502.705:1254): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:22.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:22.714000 audit[4343]: USER_START pid=4343 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.726521 kernel: audit: type=1105 audit(1719906502.714:1255): pid=4343 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.726556 kernel: audit: type=1103 audit(1719906502.715:1256): pid=4345 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.715000 audit[4345]: CRED_ACQ pid=4345 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.960639 sshd[4343]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:22.960000 audit[4343]: USER_END pid=4343 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.963504 systemd[1]: sshd@15-10.0.0.78:22-10.0.0.1:37354.service: Deactivated successfully. Jul 2 07:48:22.964163 systemd[1]: session-16.scope: Deactivated successfully. Jul 2 07:48:22.965811 systemd[1]: Started sshd@16-10.0.0.78:22-10.0.0.1:37358.service. Jul 2 07:48:22.960000 audit[4343]: CRED_DISP pid=4343 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.966692 systemd-logind[1186]: Session 16 logged out. Waiting for processes to exit. Jul 2 07:48:22.967646 systemd-logind[1186]: Removed session 16. Jul 2 07:48:22.970807 kernel: audit: type=1106 audit(1719906502.960:1257): pid=4343 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.970859 kernel: audit: type=1104 audit(1719906502.960:1258): pid=4343 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:22.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.78:22-10.0.0.1:37354 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:22.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.78:22-10.0.0.1:37358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:22.999000 audit[4356]: USER_ACCT pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.001274 sshd[4356]: Accepted publickey for core from 10.0.0.1 port 37358 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:23.000000 audit[4356]: CRED_ACQ pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.000000 audit[4356]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd57a44ed0 a2=3 a3=0 items=0 ppid=1 pid=4356 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:23.000000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:23.002149 sshd[4356]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:23.005453 systemd-logind[1186]: New session 17 of user core. Jul 2 07:48:23.006414 systemd[1]: Started session-17.scope. Jul 2 07:48:23.009000 audit[4356]: USER_START pid=4356 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.010000 audit[4358]: CRED_ACQ pid=4358 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.167296 sshd[4356]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:23.167000 audit[4356]: USER_END pid=4356 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.167000 audit[4356]: CRED_DISP pid=4356 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.78:22-10.0.0.1:37358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:23.170384 systemd[1]: sshd@16-10.0.0.78:22-10.0.0.1:37358.service: Deactivated successfully. Jul 2 07:48:23.171042 systemd[1]: session-17.scope: Deactivated successfully. Jul 2 07:48:23.171621 systemd-logind[1186]: Session 17 logged out. Waiting for processes to exit. Jul 2 07:48:23.172673 systemd[1]: Started sshd@17-10.0.0.78:22-10.0.0.1:37362.service. Jul 2 07:48:23.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.78:22-10.0.0.1:37362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:23.173585 systemd-logind[1186]: Removed session 17. Jul 2 07:48:23.208000 audit[4367]: USER_ACCT pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.209663 sshd[4367]: Accepted publickey for core from 10.0.0.1 port 37362 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:23.208000 audit[4367]: CRED_ACQ pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.208000 audit[4367]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee83968c0 a2=3 a3=0 items=0 ppid=1 pid=4367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:23.208000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:23.210547 sshd[4367]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:23.213596 systemd-logind[1186]: New session 18 of user core. Jul 2 07:48:23.214256 systemd[1]: Started session-18.scope. Jul 2 07:48:23.217000 audit[4367]: USER_START pid=4367 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:23.218000 audit[4369]: CRED_ACQ pid=4369 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.582000 audit[4401]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=4401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:24.582000 audit[4401]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffc31777340 a2=0 a3=7ffc3177732c items=0 ppid=2236 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:24.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:24.583000 audit[4401]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:24.583000 audit[4401]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc31777340 a2=0 a3=0 items=0 ppid=2236 pid=4401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:24.583000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:24.591489 sshd[4367]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:24.592000 audit[4367]: USER_END pid=4367 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.592000 audit[4367]: CRED_DISP pid=4367 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.594659 systemd[1]: sshd@17-10.0.0.78:22-10.0.0.1:37362.service: Deactivated successfully. Jul 2 07:48:24.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.78:22-10.0.0.1:37362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:24.595179 systemd[1]: session-18.scope: Deactivated successfully. Jul 2 07:48:24.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.78:22-10.0.0.1:37364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:24.597324 systemd[1]: Started sshd@18-10.0.0.78:22-10.0.0.1:37364.service. Jul 2 07:48:24.598380 systemd-logind[1186]: Session 18 logged out. Waiting for processes to exit. Jul 2 07:48:24.599000 audit[4406]: NETFILTER_CFG table=filter:115 family=2 entries=32 op=nft_register_rule pid=4406 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:24.599000 audit[4406]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffd235e3400 a2=0 a3=7ffd235e33ec items=0 ppid=2236 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:24.599000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:24.601196 systemd-logind[1186]: Removed session 18. Jul 2 07:48:24.600000 audit[4406]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4406 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:24.600000 audit[4406]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd235e3400 a2=0 a3=0 items=0 ppid=2236 pid=4406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:24.600000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:24.633000 audit[4405]: USER_ACCT pid=4405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.634515 sshd[4405]: Accepted publickey for core from 10.0.0.1 port 37364 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:24.634000 audit[4405]: CRED_ACQ pid=4405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.634000 audit[4405]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff02e82a40 a2=3 a3=0 items=0 ppid=1 pid=4405 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:24.634000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:24.635465 sshd[4405]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:24.639241 systemd-logind[1186]: New session 19 of user core. Jul 2 07:48:24.639915 systemd[1]: Started session-19.scope. Jul 2 07:48:24.644000 audit[4405]: USER_START pid=4405 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.645000 audit[4408]: CRED_ACQ pid=4408 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.829661 sshd[4405]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:24.830000 audit[4405]: USER_END pid=4405 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.830000 audit[4405]: CRED_DISP pid=4405 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.833095 systemd[1]: Started sshd@19-10.0.0.78:22-10.0.0.1:37380.service. Jul 2 07:48:24.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.78:22-10.0.0.1:37380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:24.834579 systemd-logind[1186]: Session 19 logged out. Waiting for processes to exit. Jul 2 07:48:24.834709 systemd[1]: sshd@18-10.0.0.78:22-10.0.0.1:37364.service: Deactivated successfully. Jul 2 07:48:24.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.78:22-10.0.0.1:37364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:24.835454 systemd[1]: session-19.scope: Deactivated successfully. Jul 2 07:48:24.837043 systemd-logind[1186]: Removed session 19. Jul 2 07:48:24.868000 audit[4416]: USER_ACCT pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.869301 sshd[4416]: Accepted publickey for core from 10.0.0.1 port 37380 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:24.869000 audit[4416]: CRED_ACQ pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.869000 audit[4416]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda611be20 a2=3 a3=0 items=0 ppid=1 pid=4416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:24.869000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:24.870359 sshd[4416]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:24.873431 systemd-logind[1186]: New session 20 of user core. Jul 2 07:48:24.874154 systemd[1]: Started session-20.scope. Jul 2 07:48:24.877000 audit[4416]: USER_START pid=4416 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.878000 audit[4419]: CRED_ACQ pid=4419 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.977095 sshd[4416]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:24.977000 audit[4416]: USER_END pid=4416 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.977000 audit[4416]: CRED_DISP pid=4416 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:24.979423 systemd[1]: sshd@19-10.0.0.78:22-10.0.0.1:37380.service: Deactivated successfully. Jul 2 07:48:24.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.78:22-10.0.0.1:37380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:24.980127 systemd[1]: session-20.scope: Deactivated successfully. Jul 2 07:48:24.980613 systemd-logind[1186]: Session 20 logged out. Waiting for processes to exit. Jul 2 07:48:24.981309 systemd-logind[1186]: Removed session 20. Jul 2 07:48:29.980880 systemd[1]: Started sshd@20-10.0.0.78:22-10.0.0.1:37394.service. Jul 2 07:48:29.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.78:22-10.0.0.1:37394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:29.982082 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 2 07:48:29.982144 kernel: audit: type=1130 audit(1719906509.980:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.78:22-10.0.0.1:37394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:30.015000 audit[4461]: USER_ACCT pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.016239 sshd[4461]: Accepted publickey for core from 10.0.0.1 port 37394 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:30.018787 sshd[4461]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:30.017000 audit[4461]: CRED_ACQ pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.022550 systemd-logind[1186]: New session 21 of user core. Jul 2 07:48:30.023709 systemd[1]: Started session-21.scope. Jul 2 07:48:30.024274 kernel: audit: type=1101 audit(1719906510.015:1301): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.024332 kernel: audit: type=1103 audit(1719906510.017:1302): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.024355 kernel: audit: type=1006 audit(1719906510.018:1303): pid=4461 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 2 07:48:30.026782 kernel: audit: type=1300 audit(1719906510.018:1303): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc107965f0 a2=3 a3=0 items=0 ppid=1 pid=4461 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.018000 audit[4461]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc107965f0 a2=3 a3=0 items=0 ppid=1 pid=4461 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.031102 kernel: audit: type=1327 audit(1719906510.018:1303): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:30.018000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:30.032557 kernel: audit: type=1105 audit(1719906510.028:1304): pid=4461 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.028000 audit[4461]: USER_START pid=4461 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.037166 kernel: audit: type=1103 audit(1719906510.029:1305): pid=4463 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.029000 audit[4463]: CRED_ACQ pid=4463 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.127815 sshd[4461]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:30.128000 audit[4461]: USER_END pid=4461 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.129710 systemd[1]: sshd@20-10.0.0.78:22-10.0.0.1:37394.service: Deactivated successfully. Jul 2 07:48:30.130428 systemd[1]: session-21.scope: Deactivated successfully. Jul 2 07:48:30.128000 audit[4461]: CRED_DISP pid=4461 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.134804 systemd-logind[1186]: Session 21 logged out. Waiting for processes to exit. Jul 2 07:48:30.135707 systemd-logind[1186]: Removed session 21. Jul 2 07:48:30.137127 kernel: audit: type=1106 audit(1719906510.128:1306): pid=4461 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.137167 kernel: audit: type=1104 audit(1719906510.128:1307): pid=4461 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:30.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.78:22-10.0.0.1:37394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:30.520000 audit[4475]: NETFILTER_CFG table=filter:117 family=2 entries=20 op=nft_register_rule pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:30.520000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffde340db30 a2=0 a3=7ffde340db1c items=0 ppid=2236 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.520000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:30.522000 audit[4475]: NETFILTER_CFG table=nat:118 family=2 entries=104 op=nft_register_chain pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:30.522000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffde340db30 a2=0 a3=7ffde340db1c items=0 ppid=2236 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:30.522000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:32.468029 kubelet[2038]: E0702 07:48:32.467994 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:32.735331 kubelet[2038]: E0702 07:48:32.735195 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:35.131349 systemd[1]: Started sshd@21-10.0.0.78:22-10.0.0.1:32860.service. Jul 2 07:48:35.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.78:22-10.0.0.1:32860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:35.132580 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 2 07:48:35.132621 kernel: audit: type=1130 audit(1719906515.130:1311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.78:22-10.0.0.1:32860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:35.164000 audit[4502]: USER_ACCT pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.165903 sshd[4502]: Accepted publickey for core from 10.0.0.1 port 32860 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:35.167751 sshd[4502]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:35.166000 audit[4502]: CRED_ACQ pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.170835 systemd-logind[1186]: New session 22 of user core. Jul 2 07:48:35.171551 systemd[1]: Started session-22.scope. Jul 2 07:48:35.173872 kernel: audit: type=1101 audit(1719906515.164:1312): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.173919 kernel: audit: type=1103 audit(1719906515.166:1313): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.173948 kernel: audit: type=1006 audit(1719906515.166:1314): pid=4502 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 2 07:48:35.176241 kernel: audit: type=1300 audit(1719906515.166:1314): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe932e87e0 a2=3 a3=0 items=0 ppid=1 pid=4502 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.166000 audit[4502]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe932e87e0 a2=3 a3=0 items=0 ppid=1 pid=4502 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:35.166000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:35.181472 kernel: audit: type=1327 audit(1719906515.166:1314): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:35.181511 kernel: audit: type=1105 audit(1719906515.174:1315): pid=4502 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.174000 audit[4502]: USER_START pid=4502 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.175000 audit[4504]: CRED_ACQ pid=4504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.189291 kernel: audit: type=1103 audit(1719906515.175:1316): pid=4504 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.266683 sshd[4502]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:35.266000 audit[4502]: USER_END pid=4502 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.268762 systemd[1]: sshd@21-10.0.0.78:22-10.0.0.1:32860.service: Deactivated successfully. Jul 2 07:48:35.269471 systemd[1]: session-22.scope: Deactivated successfully. Jul 2 07:48:35.270920 systemd-logind[1186]: Session 22 logged out. Waiting for processes to exit. Jul 2 07:48:35.271706 systemd-logind[1186]: Removed session 22. Jul 2 07:48:35.266000 audit[4502]: CRED_DISP pid=4502 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.276053 kernel: audit: type=1106 audit(1719906515.266:1317): pid=4502 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.276098 kernel: audit: type=1104 audit(1719906515.266:1318): pid=4502 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:35.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.78:22-10.0.0.1:32860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:37.057000 audit[4518]: NETFILTER_CFG table=filter:119 family=2 entries=9 op=nft_register_rule pid=4518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.057000 audit[4518]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7fff5e60d270 a2=0 a3=7fff5e60d25c items=0 ppid=2236 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.059000 audit[4518]: NETFILTER_CFG table=nat:120 family=2 entries=44 op=nft_register_rule pid=4518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.059000 audit[4518]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7fff5e60d270 a2=0 a3=7fff5e60d25c items=0 ppid=2236 pid=4518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.059000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.068622 kubelet[2038]: I0702 07:48:37.068575 2038 topology_manager.go:215] "Topology Admit Handler" podUID="71896df5-fd8b-432a-b989-daf830352dde" podNamespace="calico-apiserver" podName="calico-apiserver-86c6896b48-9ldg8" Jul 2 07:48:37.074547 systemd[1]: Created slice kubepods-besteffort-pod71896df5_fd8b_432a_b989_daf830352dde.slice. Jul 2 07:48:37.077000 audit[4520]: NETFILTER_CFG table=filter:121 family=2 entries=10 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.077000 audit[4520]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffeaacf2d10 a2=0 a3=7ffeaacf2cfc items=0 ppid=2236 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.077000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.080000 audit[4520]: NETFILTER_CFG table=nat:122 family=2 entries=44 op=nft_register_rule pid=4520 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:37.080000 audit[4520]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffeaacf2d10 a2=0 a3=7ffeaacf2cfc items=0 ppid=2236 pid=4520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:37.080000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:37.231691 kubelet[2038]: I0702 07:48:37.231650 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-99k62\" (UniqueName: \"kubernetes.io/projected/71896df5-fd8b-432a-b989-daf830352dde-kube-api-access-99k62\") pod \"calico-apiserver-86c6896b48-9ldg8\" (UID: \"71896df5-fd8b-432a-b989-daf830352dde\") " pod="calico-apiserver/calico-apiserver-86c6896b48-9ldg8" Jul 2 07:48:37.231691 kubelet[2038]: I0702 07:48:37.231693 2038 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/71896df5-fd8b-432a-b989-daf830352dde-calico-apiserver-certs\") pod \"calico-apiserver-86c6896b48-9ldg8\" (UID: \"71896df5-fd8b-432a-b989-daf830352dde\") " pod="calico-apiserver/calico-apiserver-86c6896b48-9ldg8" Jul 2 07:48:37.332199 kubelet[2038]: E0702 07:48:37.332060 2038 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Jul 2 07:48:37.332199 kubelet[2038]: E0702 07:48:37.332137 2038 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/71896df5-fd8b-432a-b989-daf830352dde-calico-apiserver-certs podName:71896df5-fd8b-432a-b989-daf830352dde nodeName:}" failed. No retries permitted until 2024-07-02 07:48:37.832119126 +0000 UTC m=+77.206422197 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/71896df5-fd8b-432a-b989-daf830352dde-calico-apiserver-certs") pod "calico-apiserver-86c6896b48-9ldg8" (UID: "71896df5-fd8b-432a-b989-daf830352dde") : secret "calico-apiserver-certs" not found Jul 2 07:48:37.978109 env[1201]: time="2024-07-02T07:48:37.978048005Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-86c6896b48-9ldg8,Uid:71896df5-fd8b-432a-b989-daf830352dde,Namespace:calico-apiserver,Attempt:0,}" Jul 2 07:48:38.189689 systemd-networkd[1015]: calid3a49bb99ff: Link UP Jul 2 07:48:38.191770 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid3a49bb99ff: link becomes ready Jul 2 07:48:38.191212 systemd-networkd[1015]: calid3a49bb99ff: Gained carrier Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.137 [INFO][4529] plugin.go 326: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0 calico-apiserver-86c6896b48- calico-apiserver 71896df5-fd8b-432a-b989-daf830352dde 1134 0 2024-07-02 07:48:37 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:86c6896b48 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-86c6896b48-9ldg8 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid3a49bb99ff [] []}} ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.137 [INFO][4529] k8s.go 77: Extracted identifiers for CmdAddK8s ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.159 [INFO][4543] ipam_plugin.go 224: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" HandleID="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Workload="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.166 [INFO][4543] ipam_plugin.go 264: Auto assigning IP ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" HandleID="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Workload="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000312ce0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-86c6896b48-9ldg8", "timestamp":"2024-07-02 07:48:38.159797235 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.166 [INFO][4543] ipam_plugin.go 352: About to acquire host-wide IPAM lock. Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.166 [INFO][4543] ipam_plugin.go 367: Acquired host-wide IPAM lock. Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.166 [INFO][4543] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.168 [INFO][4543] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.171 [INFO][4543] ipam.go 372: Looking up existing affinities for host host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.174 [INFO][4543] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.176 [INFO][4543] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.177 [INFO][4543] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.177 [INFO][4543] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.178 [INFO][4543] ipam.go 1685: Creating new handle: k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.181 [INFO][4543] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.186 [INFO][4543] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.186 [INFO][4543] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" host="localhost" Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.186 [INFO][4543] ipam_plugin.go 373: Released host-wide IPAM lock. Jul 2 07:48:38.201543 env[1201]: 2024-07-02 07:48:38.186 [INFO][4543] ipam_plugin.go 282: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" HandleID="k8s-pod-network.c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Workload="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.202335 env[1201]: 2024-07-02 07:48:38.188 [INFO][4529] k8s.go 386: Populated endpoint ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0", GenerateName:"calico-apiserver-86c6896b48-", Namespace:"calico-apiserver", SelfLink:"", UID:"71896df5-fd8b-432a-b989-daf830352dde", ResourceVersion:"1134", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"86c6896b48", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-86c6896b48-9ldg8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3a49bb99ff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:38.202335 env[1201]: 2024-07-02 07:48:38.188 [INFO][4529] k8s.go 387: Calico CNI using IPs: [192.168.88.133/32] ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.202335 env[1201]: 2024-07-02 07:48:38.188 [INFO][4529] dataplane_linux.go 68: Setting the host side veth name to calid3a49bb99ff ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.202335 env[1201]: 2024-07-02 07:48:38.189 [INFO][4529] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.202335 env[1201]: 2024-07-02 07:48:38.191 [INFO][4529] k8s.go 414: Added Mac, interface name, and active container ID to endpoint ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0", GenerateName:"calico-apiserver-86c6896b48-", Namespace:"calico-apiserver", SelfLink:"", UID:"71896df5-fd8b-432a-b989-daf830352dde", ResourceVersion:"1134", Generation:0, CreationTimestamp:time.Date(2024, time.July, 2, 7, 48, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"86c6896b48", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be", Pod:"calico-apiserver-86c6896b48-9ldg8", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3a49bb99ff", MAC:"ca:ad:d0:5b:c2:88", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Jul 2 07:48:38.202335 env[1201]: 2024-07-02 07:48:38.197 [INFO][4529] k8s.go 500: Wrote updated endpoint to datastore ContainerID="c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be" Namespace="calico-apiserver" Pod="calico-apiserver-86c6896b48-9ldg8" WorkloadEndpoint="localhost-k8s-calico--apiserver--86c6896b48--9ldg8-eth0" Jul 2 07:48:38.212883 env[1201]: time="2024-07-02T07:48:38.212810351Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 2 07:48:38.212883 env[1201]: time="2024-07-02T07:48:38.212853070Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 2 07:48:38.212883 env[1201]: time="2024-07-02T07:48:38.212863470Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 2 07:48:38.213667 env[1201]: time="2024-07-02T07:48:38.213442072Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be pid=4571 runtime=io.containerd.runc.v2 Jul 2 07:48:38.214000 audit[4579]: NETFILTER_CFG table=filter:123 family=2 entries=51 op=nft_register_chain pid=4579 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 2 07:48:38.214000 audit[4579]: SYSCALL arch=c000003e syscall=46 success=yes exit=26260 a0=3 a1=7ffe49ca94d0 a2=0 a3=7ffe49ca94bc items=0 ppid=3166 pid=4579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:38.214000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 2 07:48:38.225000 systemd[1]: Started cri-containerd-c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be.scope. Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.234000 audit: BPF prog-id=180 op=LOAD Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4571 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:38.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338306365346666326336326136626234386366666638666331313964 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4571 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:38.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338306365346666326336326136626234386366666638666331313964 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit: BPF prog-id=181 op=LOAD Jul 2 07:48:38.235000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021a950 items=0 ppid=4571 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:38.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338306365346666326336326136626234386366666638666331313964 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit: BPF prog-id=182 op=LOAD Jul 2 07:48:38.235000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021a998 items=0 ppid=4571 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:38.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338306365346666326336326136626234386366666638666331313964 Jul 2 07:48:38.235000 audit: BPF prog-id=182 op=UNLOAD Jul 2 07:48:38.235000 audit: BPF prog-id=181 op=UNLOAD Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:38.235000 audit: BPF prog-id=183 op=LOAD Jul 2 07:48:38.235000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021ada8 items=0 ppid=4571 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:38.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338306365346666326336326136626234386366666638666331313964 Jul 2 07:48:38.237772 systemd-resolved[1136]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 2 07:48:38.259242 env[1201]: time="2024-07-02T07:48:38.259186880Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-86c6896b48-9ldg8,Uid:71896df5-fd8b-432a-b989-daf830352dde,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be\"" Jul 2 07:48:38.260833 env[1201]: time="2024-07-02T07:48:38.260815534Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\"" Jul 2 07:48:39.925500 systemd-networkd[1015]: calid3a49bb99ff: Gained IPv6LL Jul 2 07:48:40.270937 systemd[1]: Started sshd@22-10.0.0.78:22-10.0.0.1:32866.service. Jul 2 07:48:40.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.78:22-10.0.0.1:32866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:40.272668 kernel: kauditd_printk_skb: 73 callbacks suppressed Jul 2 07:48:40.272737 kernel: audit: type=1130 audit(1719906520.269:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.78:22-10.0.0.1:32866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:40.307000 audit[4608]: USER_ACCT pid=4608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.308817 sshd[4608]: Accepted publickey for core from 10.0.0.1 port 32866 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:40.321471 sshd[4608]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:40.310000 audit[4608]: CRED_ACQ pid=4608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.325820 systemd-logind[1186]: New session 23 of user core. Jul 2 07:48:40.325947 systemd[1]: Started session-23.scope. Jul 2 07:48:40.328992 kernel: audit: type=1101 audit(1719906520.307:1344): pid=4608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.329056 kernel: audit: type=1103 audit(1719906520.310:1345): pid=4608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.329102 kernel: audit: type=1006 audit(1719906520.310:1346): pid=4608 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 2 07:48:40.331281 kernel: audit: type=1300 audit(1719906520.310:1346): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3137e2e0 a2=3 a3=0 items=0 ppid=1 pid=4608 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:40.310000 audit[4608]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3137e2e0 a2=3 a3=0 items=0 ppid=1 pid=4608 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:40.335307 kernel: audit: type=1327 audit(1719906520.310:1346): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:40.310000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:40.336601 kernel: audit: type=1105 audit(1719906520.329:1347): pid=4608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.329000 audit[4608]: USER_START pid=4608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.330000 audit[4610]: CRED_ACQ pid=4610 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.344236 kernel: audit: type=1103 audit(1719906520.330:1348): pid=4610 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.430648 sshd[4608]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:40.430000 audit[4608]: USER_END pid=4608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.433417 systemd[1]: sshd@22-10.0.0.78:22-10.0.0.1:32866.service: Deactivated successfully. Jul 2 07:48:40.434219 systemd[1]: session-23.scope: Deactivated successfully. Jul 2 07:48:40.435200 systemd-logind[1186]: Session 23 logged out. Waiting for processes to exit. Jul 2 07:48:40.435852 systemd-logind[1186]: Removed session 23. Jul 2 07:48:40.430000 audit[4608]: CRED_DISP pid=4608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.449687 kernel: audit: type=1106 audit(1719906520.430:1349): pid=4608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.449778 kernel: audit: type=1104 audit(1719906520.430:1350): pid=4608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:40.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.78:22-10.0.0.1:32866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:42.737335 env[1201]: time="2024-07-02T07:48:42.737286190Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:42.740728 env[1201]: time="2024-07-02T07:48:42.740677879Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:42.744579 env[1201]: time="2024-07-02T07:48:42.744545054Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.28.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:42.748867 env[1201]: time="2024-07-02T07:48:42.748830666Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:e8f124312a4c41451e51bfc00b6e98929e9eb0510905f3301542719a3e8d2fec,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 2 07:48:42.749342 env[1201]: time="2024-07-02T07:48:42.749302573Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.28.0\" returns image reference \"sha256:6c07591fd1cfafb48d575f75a6b9d8d3cc03bead5b684908ef5e7dd3132794d6\"" Jul 2 07:48:42.750805 env[1201]: time="2024-07-02T07:48:42.750778940Z" level=info msg="CreateContainer within sandbox \"c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 2 07:48:42.762945 env[1201]: time="2024-07-02T07:48:42.762900792Z" level=info msg="CreateContainer within sandbox \"c80ce4ff2c62a6bb48cfff8fc119d3805738654f028b7858e5f9addd09d6a8be\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"2c7dcce75f756c1da7b046d86f42aeed96c572e1f7c51d21043341e30dcdbb8c\"" Jul 2 07:48:42.764218 env[1201]: time="2024-07-02T07:48:42.764195698Z" level=info msg="StartContainer for \"2c7dcce75f756c1da7b046d86f42aeed96c572e1f7c51d21043341e30dcdbb8c\"" Jul 2 07:48:42.784367 systemd[1]: Started cri-containerd-2c7dcce75f756c1da7b046d86f42aeed96c572e1f7c51d21043341e30dcdbb8c.scope. Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.792000 audit: BPF prog-id=184 op=LOAD Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=4571 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:42.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376463636537356637353663316461376230343664383666343261 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=4571 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:42.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376463636537356637353663316461376230343664383666343261 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit: BPF prog-id=185 op=LOAD Jul 2 07:48:42.793000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0003bf310 items=0 ppid=4571 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:42.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376463636537356637353663316461376230343664383666343261 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit: BPF prog-id=186 op=LOAD Jul 2 07:48:42.793000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0003bf358 items=0 ppid=4571 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:42.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376463636537356637353663316461376230343664383666343261 Jul 2 07:48:42.793000 audit: BPF prog-id=186 op=UNLOAD Jul 2 07:48:42.793000 audit: BPF prog-id=185 op=UNLOAD Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 2 07:48:42.793000 audit: BPF prog-id=187 op=LOAD Jul 2 07:48:42.793000 audit[4628]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0003bf768 items=0 ppid=4571 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:42.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263376463636537356637353663316461376230343664383666343261 Jul 2 07:48:42.822149 env[1201]: time="2024-07-02T07:48:42.822092356Z" level=info msg="StartContainer for \"2c7dcce75f756c1da7b046d86f42aeed96c572e1f7c51d21043341e30dcdbb8c\" returns successfully" Jul 2 07:48:43.212000 audit[4638]: AVC avc: denied { watch } for pid=4638 comm="apiserver" path="/calico-apiserver-certs/..2024_07_02_07_48_37.3756629924/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c515,c926 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c515,c926 tclass=file permissive=0 Jul 2 07:48:43.212000 audit[4638]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0001c78a0 a2=fc6 a3=0 items=0 ppid=4571 pid=4638 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c515,c926 key=(null) Jul 2 07:48:43.212000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 2 07:48:43.563000 audit[4660]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=4660 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:43.563000 audit[4660]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc58eba970 a2=0 a3=7ffc58eba95c items=0 ppid=2236 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:43.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:43.565000 audit[4660]: NETFILTER_CFG table=nat:125 family=2 entries=44 op=nft_register_rule pid=4660 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:43.565000 audit[4660]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffc58eba970 a2=0 a3=7ffc58eba95c items=0 ppid=2236 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:43.565000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:43.680796 kubelet[2038]: I0702 07:48:43.680758 2038 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-86c6896b48-9ldg8" podStartSLOduration=2.19175626 podStartE2EDuration="6.680714611s" podCreationTimestamp="2024-07-02 07:48:37 +0000 UTC" firstStartedPulling="2024-07-02 07:48:38.260539569 +0000 UTC m=+77.634842640" lastFinishedPulling="2024-07-02 07:48:42.74949792 +0000 UTC m=+82.123800991" observedRunningTime="2024-07-02 07:48:43.680171839 +0000 UTC m=+83.054474910" watchObservedRunningTime="2024-07-02 07:48:43.680714611 +0000 UTC m=+83.055017672" Jul 2 07:48:43.690000 audit[4662]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=4662 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:43.690000 audit[4662]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffe309933a0 a2=0 a3=7ffe3099338c items=0 ppid=2236 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:43.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:43.691000 audit[4662]: NETFILTER_CFG table=nat:127 family=2 entries=44 op=nft_register_rule pid=4662 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:43.691000 audit[4662]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffe309933a0 a2=0 a3=7ffe3099338c items=0 ppid=2236 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:43.691000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:43.734931 kubelet[2038]: E0702 07:48:43.734901 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:44.704000 audit[4664]: NETFILTER_CFG table=filter:128 family=2 entries=9 op=nft_register_rule pid=4664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:44.704000 audit[4664]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffd439305f0 a2=0 a3=7ffd439305dc items=0 ppid=2236 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:44.704000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:44.705000 audit[4664]: NETFILTER_CFG table=nat:129 family=2 entries=51 op=nft_register_chain pid=4664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 2 07:48:44.705000 audit[4664]: SYSCALL arch=c000003e syscall=46 success=yes exit=18564 a0=3 a1=7ffd439305f0 a2=0 a3=7ffd439305dc items=0 ppid=2236 pid=4664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:44.705000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 2 07:48:45.434630 systemd[1]: Started sshd@23-10.0.0.78:22-10.0.0.1:45780.service. Jul 2 07:48:45.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.78:22-10.0.0.1:45780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:45.436047 kernel: kauditd_printk_skb: 79 callbacks suppressed Jul 2 07:48:45.436103 kernel: audit: type=1130 audit(1719906525.433:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.78:22-10.0.0.1:45780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:45.471000 audit[4666]: USER_ACCT pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.473604 sshd[4666]: Accepted publickey for core from 10.0.0.1 port 45780 ssh2: RSA SHA256:nleLw6rQrPXDNmjSByoAmmq8uYaZ7eXcVx3kSRwUXrw Jul 2 07:48:45.475000 audit[4666]: CRED_ACQ pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.477130 sshd[4666]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 2 07:48:45.480743 kernel: audit: type=1101 audit(1719906525.471:1378): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.480806 kernel: audit: type=1103 audit(1719906525.475:1379): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.480825 kernel: audit: type=1006 audit(1719906525.475:1380): pid=4666 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 2 07:48:45.481144 systemd-logind[1186]: New session 24 of user core. Jul 2 07:48:45.482021 systemd[1]: Started session-24.scope. Jul 2 07:48:45.482968 kernel: audit: type=1300 audit(1719906525.475:1380): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda70de2e0 a2=3 a3=0 items=0 ppid=1 pid=4666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:45.475000 audit[4666]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda70de2e0 a2=3 a3=0 items=0 ppid=1 pid=4666 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 2 07:48:45.486870 kernel: audit: type=1327 audit(1719906525.475:1380): proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:45.475000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 2 07:48:45.488254 kernel: audit: type=1105 audit(1719906525.484:1381): pid=4666 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.484000 audit[4666]: USER_START pid=4666 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.492432 kernel: audit: type=1103 audit(1719906525.485:1382): pid=4668 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.485000 audit[4668]: CRED_ACQ pid=4668 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.589299 sshd[4666]: pam_unix(sshd:session): session closed for user core Jul 2 07:48:45.588000 audit[4666]: USER_END pid=4666 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.591391 systemd[1]: sshd@23-10.0.0.78:22-10.0.0.1:45780.service: Deactivated successfully. Jul 2 07:48:45.592024 systemd[1]: session-24.scope: Deactivated successfully. Jul 2 07:48:45.592579 systemd-logind[1186]: Session 24 logged out. Waiting for processes to exit. Jul 2 07:48:45.593329 systemd-logind[1186]: Removed session 24. Jul 2 07:48:45.589000 audit[4666]: CRED_DISP pid=4666 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.598106 kernel: audit: type=1106 audit(1719906525.588:1383): pid=4666 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.598178 kernel: audit: type=1104 audit(1719906525.589:1384): pid=4666 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 2 07:48:45.590000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.78:22-10.0.0.1:45780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 2 07:48:45.735093 kubelet[2038]: E0702 07:48:45.734968 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 2 07:48:46.735604 kubelet[2038]: E0702 07:48:46.735564 2038 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"